level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="892.773µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="43.791µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="825.442µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="3.94µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.881174ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.452µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.07µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="56.501µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="60.981µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="70.362µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="414.86µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.53µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.203603ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.734507ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.001µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.362µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="233.015µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="159.474µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.052µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.542529ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="91.312µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.157.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.811475ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.613697ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.166141ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.231µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.011µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="52.921µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.56µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="73.402µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="360.108µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="14.161µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="229.866µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.049117ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.525749ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.511µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.76µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.157 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.157 ipAddr.ipv6="" k8sNodeIP=199.204.45.157 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.157" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.49" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.157" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.157} {CiliumInternalIP 10.0.0.49}] 10.0.0.0/24 [] [] 10.0.0.210 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42831" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.974793389s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.23µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="10.021µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="60.191µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="21.781µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1946 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.957110572s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=294.585012ms file-path=/var/run/cilium/state/templates/4c33b3a7c7a7d3f67dc633fea325188b123d4e35297afb74c3d81f00649442b6/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1946 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 8f68363f-44f9-4f77-b5a9-363a221cc026 default }" containerID=73639c6ec51cf3dd1c69159671794cc02993e77d51c444869e37b26e1ebf5837 datapathConfiguration="&{false false false false false }" interface=lxc9222e0f36971 k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73639c6ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73639c6ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73639c6ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=47768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73639c6ec5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=47768 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 f69cbe55-66e0-4c30-a5ff-5393c73d5828 default }" containerID=655fa525cafad1546d9a9434c88ec2cc5c95de45037a264a3b8ec9d9e082bed6 datapathConfiguration="&{false false false false false }" interface=lxc2ea7d2c5d38f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=655fa525ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=655fa525ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=655fa525ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=16911 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=655fa525ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=16911 ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identityLabels="reserved:health" ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=966 identity=4 identityLabels="reserved:health" ipv4=10.0.0.210 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.109284901s file-path=/var/run/cilium/state/templates/9312f81ac08c9582516f137419d69b40595d3dab25d11d2beddc3b341f7bd148/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=966 identity=4 ipv4=10.0.0.210 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73639c6ec5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=486 identity=47768 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=73639c6ec5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=486 identity=47768 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=655fa525ca datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3013 identity=16911 ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=endpoint level=info msg="Successful endpoint creation" containerID=655fa525ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3013 identity=16911 ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=655fa525ca endpointID=3013 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5qhww subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c78164a1-a9ab-4ac2-83ff-f8220e899cbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=655fa525ca datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3013 identity=16911 ipv4=10.0.0.51 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5qhww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 5238310d-309c-418a-94ab-8b22c1a40b55 default }" containerID=a094c87a40808a3a427ba6be45dcfe56ed306f9d3d402fb6dd53b3eeba89eef3 datapathConfiguration="&{false false false false false }" interface=lxc43b48956a316 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a094c87a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2063 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a094c87a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2063 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a094c87a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2063 identity=44747 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a094c87a40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2063 identity=44747 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a094c87a40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2063 identity=44747 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a094c87a40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2063 identity=44747 ipv4=10.0.0.125 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-8kd2b subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1946 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01946 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01946 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01946 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01946:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1946 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 8603b310-b354-4150-8fbe-504420b48efe default }" containerID=72a01f1bb6c1d6c56087d214f1f2c77219ae16c3c804e935c54bc9efab9712f1 datapathConfiguration="&{false false false false false }" interface=lxcf2b01cd7e79e k8sPodName=kube-system/coredns-67659f764b-2vx7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72a01f1bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72a01f1bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q subsys=endpoint level=info msg="Identity of endpoint changed" containerID=72a01f1bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=47768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72a01f1bb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2077 identity=47768 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 071fe57f-7f5f-44b2-97f4-77f2a702a0a9 default }" containerID=9e8121e3f6b39614eec3b178e0adfbdd81091d7a4a7d3a31690d23323e930357 datapathConfiguration="&{false false false false false }" interface=lxcd654e448f065 k8sPodName=kube-system/coredns-67659f764b-lhv2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e8121e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e8121e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9e8121e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identity=47768 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e8121e3f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3140 identity=47768 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72a01f1bb6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2077 identity=47768 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=72a01f1bb6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2077 identity=47768 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-67659f764b-2vx7q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e8121e3f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3140 identity=47768 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e8121e3f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3140 identity=47768 ipv4=10.0.0.180 ipv6= k8sPodName=kube-system/coredns-67659f764b-lhv2n subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 7b26efbc-0b4f-4b0c-9f8f-58842b449930 default }" containerID=4391f02d4253627493e7325ac19a9a76f4679feb4dc7bd903d0e3e42d7a0bc21 datapathConfiguration="&{false false false false false }" interface=lxc42e093e6f96a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=5218 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=5218 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4391f02d42 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1523 identity=5218 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4391f02d42 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1523 identity=5218 ipv4=10.0.0.220 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xvnjp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73639c6ec5 endpointID=486 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2z2h6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=73639c6ec5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=486 identity=47768 ipv4=10.0.0.98 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2z2h6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 1d5479c4-ba3d-43b4-895f-4bac74bf1bb7 default }" containerID=1ecce87f8d5712f20390c53f786f8f843165e85f8fb6f9067894a5660656627e datapathConfiguration="&{false false false false false }" interface=lxc14c390571391 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ecce87f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ecce87f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ecce87f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=19139 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ecce87f8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=19139 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ecce87f8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3347 identity=19139 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ecce87f8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3347 identity=19139 ipv4=10.0.0.30 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-f4ssp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 f041ae9f-979a-42d0-bf7d-1579f275864a default }" containerID=030c08288e33c56a23a96c5e3e9f883eb5f4d3e9c1ddde69301cd4b402ef8681 datapathConfiguration="&{false false false false false }" interface=lxc31cc86aa3072 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=030c08288e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 453dfc7a-28f7-4f1b-93a6-5b40eb48180b default }" containerID=7165d7f36e1cf7218f0940b12f7b68775cf894856c2d6022229a8451ab4db712 datapathConfiguration="&{false false false false false }" interface=lxc002050cd458d k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=030c08288e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=7165d7f36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7165d7f36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=030c08288e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=4391 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=030c08288e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=4391 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7165d7f36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=64607 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7165d7f36e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=64607 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=030c08288e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=990 identity=4391 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc subsys=endpoint level=info msg="Successful endpoint creation" containerID=030c08288e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=990 identity=4391 ipv4=10.0.0.23 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4c2nc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7165d7f36e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=573 identity=64607 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g subsys=endpoint level=info msg="Successful endpoint creation" containerID=7165d7f36e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=573 identity=64607 ipv4=10.0.0.93 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fs27g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 67390a68-e57a-4d55-ae69-c85e673b8e93 default }" containerID=1b45ae6c7370e9dddc41052aa66fd527bd40ad6bb4a543b00ba7332ec7aecea9 datapathConfiguration="&{false false false false false }" interface=lxc5fa68a0368eb k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b45ae6c73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b45ae6c73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b45ae6c73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=32483 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b45ae6c73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=32483 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b45ae6c73 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1543 identity=32483 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b45ae6c73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1543 identity=32483 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b45ae6c73 endpointID=1543 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-6lqwj subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=31d6685a-e17a-4753-adba-29d6cd77beec k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=1b45ae6c73 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1543 identity=32483 ipv4=10.0.0.188 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-6lqwj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 7f0e24de-d473-4c6a-8922-2f9cd5190e10 default }" containerID=ee3daf560027153aec465da58866c4a392f62bd88a09eeb0253022a87f0f0262 datapathConfiguration="&{false false false false false }" interface=lxc45244350f1bb k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=11787 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=998 identity=11787 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee3daf5600 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=998 identity=11787 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee3daf5600 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=998 identity=11787 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee3daf5600 endpointID=998 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-c9n5n subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bb486e66-e713-472c-8a3c-7ab0d5ed0ce5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=ee3daf5600 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=998 identity=11787 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-c9n5n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 db8085a1-932b-4c18-b6b9-67563866dc5f default }" containerID=c53ba49a5483726ba3717dd74366cd9ceb9e6705e73a09f43a5da4541b4d3afe datapathConfiguration="&{false false false false false }" interface=lxcf4a10c3ecece k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c53ba49a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c53ba49a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c53ba49a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=6316 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c53ba49a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3402 identity=6316 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c53ba49a54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3402 identity=6316 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c53ba49a54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3402 identity=6316 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-ln2qn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 283ca6ed-bbdb-41b3-ac96-e736c4805a7f default }" containerID=fa93fb42293446160050f7f9ca9010b28c1f24bc0604634dcc54adc066b84a1d datapathConfiguration="&{false false false false false }" interface=lxca8d01369291f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa93fb4229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa93fb4229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa93fb4229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=60040 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa93fb4229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=744 identity=60040 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa93fb4229 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=744 identity=60040 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa93fb4229 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=744 identity=60040 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa93fb4229 endpointID=744 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-k4rct subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=478d8577-d986-42f8-b73e-dd3fe1c62947 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=fa93fb4229 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=744 identity=60040 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k4rct subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5f5205e7-a2ea-44dd-8712-bcb20c857af0] Description:}]" policyAddRequest=b32b8bc8-ceda-473f-88b6-2e9841fd2987 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b32b8bc8-ceda-473f-88b6-2e9841fd2987 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2ea55898-1471-452f-8f6e-3fe0e7913fba] Description:}]" policyAddRequest=b22aee9c-80ca-4908-814b-a4bf1b0265bd subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b22aee9c-80ca-4908-814b-a4bf1b0265bd policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.13 bbcaf2b4-198f-45aa-b3f6-81596222f657 default }" containerID=cbc747a41e50e6833fdefcc1d95340f8575e6153035c732664752286a140f79e datapathConfiguration="&{false false false false false }" interface=lxcbce1a904fbe0 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbc747a41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbc747a41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbc747a41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=22212 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cbc747a41e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=305 identity=22212 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbc747a41e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=305 identity=22212 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbc747a41e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=305 identity=22212 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-pnq5l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.94 b70db6fd-224c-49df-ae0c-60efb332ca99 default }" containerID=c8928207f83aa6e3dffe3b14598c62d93746f0d92ae3a97ff59f4e12f2ce5f3e datapathConfiguration="&{false false false false false }" interface=lxc508864104d3a k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8928207f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8928207f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8928207f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=3960 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8928207f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1640 identity=3960 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8928207f8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1640 identity=3960 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8928207f8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1640 identity=3960 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-dtrcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 6b374396-8ba6-41f2-aa37-ba4008938d7e default }" containerID=fd5b5809982c5b4ced9dcebbbe9afcafd4c723dfad0f50bfa5ea5cfa39923e6b datapathConfiguration="&{false false false false false }" interface=lxc332630e614b4 k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd5b580998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd5b580998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fd5b580998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=41161 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd5b580998 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3310 identity=41161 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd5b580998 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3310 identity=41161 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd5b580998 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3310 identity=41161 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vk84g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 3ce019e3-1ab0-43a5-b37a-44b2690f42f0 default }" containerID=909efc070743218a07debae9d1d3e3268db771c3a0ad03d2197eedf3f7d52909 datapathConfiguration="&{false false false false false }" interface=lxce3b5927833f2 k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=909efc0707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=909efc0707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=909efc0707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=909efc0707 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=54213 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=909efc0707 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2212 identity=54213 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=endpoint level=info msg="Successful endpoint creation" containerID=909efc0707 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2212 identity=54213 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 3f57c0ae-0dec-45ed-81b6-15db34d2a956 default }" containerID=35a34cf9105ab6a443073b33a90eae00933d5a99d8fa5134a7c0919a1ebff706 datapathConfiguration="&{false false false false false }" interface=lxc61e0578b5912 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35a34cf910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35a34cf910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35a34cf910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identity=49770 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35a34cf910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identity=49770 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35a34cf910 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2886 identity=49770 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35a34cf910 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2886 identity=49770 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=909efc0707 endpointID=2212 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=909efc0707 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2212 identity=54213 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b87be30c-f87b-4697-8624-6b2dbc9a0031 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 8368ebb1-cde8-4eec-8606-fe981f5f7bd1 default }" containerID=4a2db5683069d5c0dd9da3f26f8606829fe685548acb35887c07783a69207e53 datapathConfiguration="&{false false false false false }" interface=lxc6c99b1b08366 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a2db56830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a2db56830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a2db56830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=7382 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a2db56830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=7382 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4a2db56830 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=440 identity=7382 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a2db56830 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=440 identity=7382 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f1e94139-5ccc-436b-9088-a38b1114da69] Description:}]" policyAddRequest=a2a4cc31-155b-4530-a16b-aced4e9a6efb subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=a2a4cc31-155b-4530-a16b-aced4e9a6efb policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 475f5e4d-6b75-4a89-9153-62069c03c46f default }" containerID=6906078dfbb98ee481dbd9b9d97d723ecb8a0d0d34094e9afb401083f616b2af datapathConfiguration="&{false false false false false }" interface=lxcbb3382a5a3dd k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6906078dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6906078dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6906078dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6906078dfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=54213 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6906078dfb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=578 identity=54213 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6906078dfb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=578 identity=54213 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=daemon level=info msg="Delete endpoint request" containerID=6906078dfb endpointID=578 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6906078dfb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=578 identity=54213 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ae8c8f2e-8f5c-435a-80a2-da81fd8d6a05 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 3257d14d-0f12-407f-bab0-c660f0b7d2aa default }" containerID=6382427a4e8d8522b8705e753522d78df0808a7d0d398a60c6d0bd1b4928486b datapathConfiguration="&{false false false false false }" interface=lxcada80388b6c5 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=9075 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=924 identity=9075 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6382427a4e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=924 identity=9075 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6382427a4e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=924 identity=9075 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=dd76f1b4-a3f0-4925-935d-6213f1f8c5fd] Description:}]" policyAddRequest=1cf02568-28b9-4455-8405-b8cdb99a153c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=1cf02568-28b9-4455-8405-b8cdb99a153c policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.178 927f3f7e-2a31-47a6-b0df-10eb99e73e9a default }" containerID=b686a53b526f5ec2b0c9241bd53c0472d604e41fa8b231a35a89972596fa97d3 datapathConfiguration="&{false false false false false }" interface=lxc2fa5ae6dabc6 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b686a53b52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b686a53b52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b686a53b52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=19682 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b686a53b52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1671 identity=19682 ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b686a53b52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1671 identity=19682 ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b686a53b52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1671 identity=19682 ipv4=10.0.0.178 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009367348871183736 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.154 4c02b6b6-2cfc-4b9d-bfdc-26b00ec380d0 default }" containerID=8c02b51a09600262022a8194cb7d72d2fb684ee157d6a076ffe4a19b13a91d70 datapathConfiguration="&{false false false false false }" interface=lxc74a503f586a9 k8sPodName=monitoring/node-feature-discovery-worker-mqmjp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c02b51a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c02b51a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c02b51a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=22548 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c02b51a09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=22548 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 f6692846-05ec-47eb-a8c1-decac518e5e3 default }" containerID=7105ff0da3a020efd8d12b1cabba1b3599d9a84b33f4a6d013ec451e0c445ad6 datapathConfiguration="&{false false false false false }" interface=lxc53b2d04d0fa3 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7105ff0da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7105ff0da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7105ff0da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=30861 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7105ff0da3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2211 identity=30861 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c02b51a09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=945 identity=22548 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c02b51a09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=945 identity=22548 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mqmjp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 f86ef349-607f-48fd-a56b-142c77855bb5 default }" containerID=b8dd47101765cd6f10300b64933ab61fc151d1bb1e1a286bfdb057b0c85c2e5b datapathConfiguration="&{false false false false false }" interface=lxc1c0cdaa0f5c5 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8dd471017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8dd471017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8dd471017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identity=46103 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8dd471017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3191 identity=46103 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7105ff0da3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2211 identity=30861 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=7105ff0da3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2211 identity=30861 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-hbkkx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b8dd471017 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3191 identity=46103 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8dd471017 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3191 identity=46103 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-gmd8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 bc6440be-aa9b-41b4-b563-74a1c36e2f1f default }" containerID=808f69e82b9eabbf882c159c1351879910fca1278ee4d6a645853c5586788625 datapathConfiguration="&{false false false false false }" interface=lxc41c35353ccac k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=808f69e82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=808f69e82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=808f69e82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=58738 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=808f69e82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=58738 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=808f69e82b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=956 identity=58738 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=808f69e82b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=58738 ipv4=10.0.0.26 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-j7k6f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01946 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01946 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01946 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01946:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1946 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 eb6adb10-a733-4844-b845-86f67051cad2 default }" containerID=5a928389ad0ecf33a52f3104b8071782f4585cc629ddd87c9d0b4641fa0bc8f1 datapathConfiguration="&{false false false false false }" interface=lxc9d80925f8462 k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a928389ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a928389ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a928389ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=36677 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a928389ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=36677 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5a928389ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1071 identity=36677 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a928389ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=36677 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=daemon level=info msg="Delete endpoint request" containerID=5a928389ad endpointID=1071 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-spm8h subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=545b4b99-2f29-4b4c-a9c1-9ee4e03f9e3e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5a928389ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1071 identity=36677 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-spm8h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 aec3633d-2f0e-49b2-9d16-476a026fdcc6 default }" containerID=0a42f4d7773ef2ead0d363adb8dc0e2d557474e7d3eab349cbf4176d8516e7d2 datapathConfiguration="&{false false false false false }" interface=lxc2720b42edf12 k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=18371 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1857 identity=18371 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 8ad0c949-195a-4e35-a453-abf048fc6552 default }" containerID=4713809e07a1a810f882120954b7d0a64d99dbf984345be4e4b35ff812c6cc7e datapathConfiguration="&{false false false false false }" interface=lxc58fea72fd6c7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4713809e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4713809e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.68 07d3197a-785a-48e7-a78f-669301b8c5db default }" containerID=4d6fe009ab93fb479e3da2b5ab84083664803e885f60b69feb8d84eadb0c4437 datapathConfiguration="&{false false false false false }" interface=lxc9156b80fcba2 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d6fe009ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d6fe009ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=4713809e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=12090 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4713809e07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2473 identity=12090 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d6fe009ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=33361 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d6fe009ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=433 identity=33361 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a42f4d777 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1857 identity=18371 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a42f4d777 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1857 identity=18371 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fb9f76b95-26hb8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4713809e07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2473 identity=12090 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4713809e07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2473 identity=12090 ipv4=10.0.0.38 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-z92mb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d6fe009ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=433 identity=33361 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d6fe009ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=433 identity=33361 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-9r58m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 684ebb68-bb90-4883-8d67-1ed0e1be0bc7 default }" containerID=c8da8415f7fac597c03d0413168eea8439f63c5debc09a164853e5fc6fcfe94a datapathConfiguration="&{false false false false false }" interface=lxc89afd3d81444 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8da8415f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8da8415f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=269be0ac-f998-44af-b5b9-f62b82406411,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=269be0ac-f998-44af-b5b9-f62b82406411,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=269be0ac-f998-44af-b5b9-f62b82406411;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=269be0ac-f998-44af-b5b9-f62b82406411;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8da8415f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=8744 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=269be0ac-f998-44af-b5b9-f62b82406411,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=269be0ac-f998-44af-b5b9-f62b82406411,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8da8415f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3263 identity=8744 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8da8415f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3263 identity=8744 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8da8415f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3263 identity=8744 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8da8415f7 endpointID=3263 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-hxh2t subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=269be0ac-f998-44af-b5b9-f62b82406411 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=269be0ac-f998-44af-b5b9-f62b82406411 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c8da8415f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3263 identity=8744 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-hxh2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 870eed39-2d1e-4c3e-a6d0-6930b13eb288 default }" containerID=19b15d9c044e54189079370e8de3b9fc2a6c8711ce95d1121c97c8c877ce3ba5 datapathConfiguration="&{false false false false false }" interface=lxc6904ce847ee1 k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19b15d9c04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19b15d9c04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19b15d9c04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19b15d9c04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1305 identity=54213 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19b15d9c04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1305 identity=54213 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=endpoint level=info msg="Successful endpoint creation" containerID=19b15d9c04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1305 identity=54213 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 34905569-9afb-416d-810f-b6ede719d143 default }" containerID=e985c1d678a378fa500faaf8a7ebea1d2ac81547098c1981a88483321a1b675a datapathConfiguration="&{false false false false false }" interface=lxc2494cec189e5 k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e985c1d678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e985c1d678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e985c1d678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e985c1d678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=54213 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e985c1d678 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=207 identity=54213 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=endpoint level=info msg="Successful endpoint creation" containerID=e985c1d678 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=54213 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=daemon level=info msg="Delete endpoint request" containerID=e985c1d678 endpointID=207 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=19b15d9c04 endpointID=1305 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e985c1d678 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=207 identity=54213 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-161bf6b8-e095-4118-a9ae-7f4e719b31ab subsys=endpoint level=info msg="Removed endpoint" containerID=19b15d9c04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1305 identity=54213 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65a706df-9476-45b0-9363-22e5db4165ae subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 685be680-534d-4221-93f7-ccf1a1137206 default }" containerID=9f156de76cfea4d9fcade9b15b1cd52c0188c160969ddbe70e123019e409fb43 datapathConfiguration="&{false false false false false }" interface=lxc2e792a183e6e k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=5578 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=5578 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 40c4d909-86d6-41f1-a9d7-7011620076eb default }" containerID=e35a3cae536bbdd30693b021989aba9e51febcfa8066b6f1a76d7d9696627b81 datapathConfiguration="&{false false false false false }" interface=lxcd19b2785e69b k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e35a3cae53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e35a3cae53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e35a3cae53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=19779 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e35a3cae53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=373 identity=19779 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f156de76c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=725 identity=5578 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f156de76c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=725 identity=5578 ipv4=10.0.0.100 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-2578h subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 e0baf1f5-a54e-4396-9ae1-5db13a16dd73 default }" containerID=472af8ce06cfe5841193135becca691e56218caa2fd8ff1ca6806f7ef0cc9e30 datapathConfiguration="&{false false false false false }" interface=lxc17160142f6dd k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=472af8ce06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=472af8ce06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=472af8ce06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=472af8ce06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=54213 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 3767fd8a-3f12-4c7a-9e7b-cea4e374b6ed default }" containerID=ef1c94c958d4250e8673ff35a9a3604096e5cd17daef04983e88660ccccfd502 datapathConfiguration="&{false false false false false }" interface=lxc85042b4e7e70 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef1c94c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef1c94c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef1c94c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=13498 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef1c94c958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3562 identity=13498 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e35a3cae53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=373 identity=19779 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e35a3cae53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=373 identity=19779 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=472af8ce06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=54213 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=472af8ce06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=54213 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ef1c94c958 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3562 identity=13498 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef1c94c958 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3562 identity=13498 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 6dd35972-e018-4baa-a93c-d2ed84b1a1d5 default }" containerID=d27d019da683f04fc0d672263cd6d817312d5fa596f8a40e3cff11152c90234e datapathConfiguration="&{false false false false false }" interface=lxc2794dbd57304 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=33232 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=33232 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d27d019da6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1708 identity=33232 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d27d019da6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1708 identity=33232 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 360956ba-a017-4302-becb-7cc02bac7c75 default }" containerID=b539a818e95d171f8f898416f69af467dcca11a91b30b6a899ba2d03e041a305 datapathConfiguration="&{false false false false false }" interface=lxcaa056d623b79 k8sPodName=monitoring/vector-gvkqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b539a818e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b539a818e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b539a818e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=1216 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b539a818e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1030 identity=1216 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b539a818e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1030 identity=1216 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b539a818e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1030 identity=1216 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/vector-gvkqn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 700912f3-dbf1-4096-a768-c686c4d9514c default }" containerID=354204d2b2d806196a93f751b7dd0c484832b8e3095687ac41df490e690fb968 datapathConfiguration="&{false false false false false }" interface=lxc696aed7f875c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=354204d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=354204d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=354204d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=24527 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=354204d2b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=24527 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=354204d2b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1700 identity=24527 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=354204d2b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1700 identity=24527 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=472af8ce06 endpointID=662 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=472af8ce06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=54213 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b18a1ba9-dd48-4b73-a82e-fb1bc0f69d52 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.82 c6d3b6b6-6a4c-4028-952a-d6249305df41 default }" containerID=b3f6f8e8e8c21a05c49e71aee3b6ef2444cc38980f1650d71a912ef844d51078 datapathConfiguration="&{false false false false false }" interface=lxcdcc8bd23e165 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3f6f8e8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3f6f8e8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3f6f8e8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=5272 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3f6f8e8e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1055 identity=5272 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3f6f8e8e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1055 identity=5272 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3f6f8e8e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1055 identity=5272 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 6832f24b-dec9-4ef0-9708-431d43331ef8 default }" containerID=2f880f3d69accddfc1813c4a4200f2e3579540c2d4d847b21e63750b69957f7a datapathConfiguration="&{false false false false false }" interface=lxc1f1d8c81cbb0 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f880f3d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f880f3d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f880f3d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identity=16918 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f880f3d69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3876 identity=16918 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f880f3d69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3876 identity=16918 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f880f3d69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3876 identity=16918 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-jmzfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 04e5369c-d995-4755-8a24-57ec01c5eb7b default }" containerID=b91a9e8c362aee279a0273c7a205df0b11a603a45c0e60508d7e9a52509bea04 datapathConfiguration="&{false false false false false }" interface=lxc30b06d67606a k8sPodName=openstack/memcached-memcached-6479589586-gvl2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=13447 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=13447 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b91a9e8c36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=202 identity=13447 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b91a9e8c36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=202 identity=13447 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-gvl2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 a3a23dde-8fbc-4466-ad36-1777d4932870 default }" containerID=d25f3d1fb8be9cc297fefe66e262bbe4e8722250ef5469ccb01d26da41a6633a datapathConfiguration="&{false false false false false }" interface=lxcc3deba0cd862 k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d25f3d1fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d25f3d1fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d25f3d1fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d25f3d1fb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=326 identity=54213 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d25f3d1fb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=326 identity=54213 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=endpoint level=info msg="Successful endpoint creation" containerID=d25f3d1fb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=54213 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=daemon level=info msg="Delete endpoint request" containerID=d25f3d1fb8 endpointID=326 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d25f3d1fb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=326 identity=54213 ipv4=10.0.0.248 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-903c9f5d-5cc7-45f2-832c-58a56682728a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 449598b2-7b4e-4b18-b620-a2ad0aeef4f8 default }" containerID=b39d341f8cadc3627190876ded51cfc6e156b2962ab35823d4f00653f22b0202 datapathConfiguration="&{false false false false false }" interface=lxc0f64562359d1 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b39d341f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b39d341f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b39d341f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=55189 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b39d341f8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=55189 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b39d341f8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1859 identity=55189 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b39d341f8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1859 identity=55189 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 360acfc9-20d7-468d-a32a-dc9bea16da67 default }" containerID=81e8ac925a70fb30f782092c74fa6d2f63b6b60fe69c494f7e64ad0db271c4e6 datapathConfiguration="&{false false false false false }" interface=lxcb64765335e47 k8sPodName=openstack/keystone-api-6c475d6545-kgqkz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81e8ac925a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81e8ac925a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81e8ac925a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=62588 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81e8ac925a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=62588 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 8cb073c7-f936-4ffd-af3f-9b66b24f5d68 default }" containerID=c82647052fed729f768302cc7c306b5f1e71c221b5f63563abf901f733e2e220 datapathConfiguration="&{false false false false false }" interface=lxce245097bdd09 k8sPodName=openstack/keystone-credential-setup-6j8sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c82647052f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c82647052f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c82647052f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=22852 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c82647052f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3683 identity=22852 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81e8ac925a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1840 identity=62588 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz subsys=endpoint level=info msg="Successful endpoint creation" containerID=81e8ac925a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1840 identity=62588 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-6c475d6545-kgqkz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c82647052f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3683 identity=22852 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c82647052f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3683 identity=22852 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c82647052f endpointID=3683 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6j8sg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c7e661af-7394-46e6-b575-b79e0e15c7e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c82647052f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3683 identity=22852 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-6j8sg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 da4d23e4-ee36-4b75-9f17-1abf2682ebdd default }" containerID=aa56d2dfe14851b4335f1dbf658ff30d0aeb80c65e4d0cc7fdd992e5db43e65d datapathConfiguration="&{false false false false false }" interface=lxc1427f80e28a0 k8sPodName=openstack/keystone-db-init-rg8wk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa56d2dfe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa56d2dfe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba34135c-f932-4430-af55-9d540fc03f62,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ba34135c-f932-4430-af55-9d540fc03f62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ba34135c-f932-4430-af55-9d540fc03f62;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=ba34135c-f932-4430-af55-9d540fc03f62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=aa56d2dfe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=54620 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ba34135c-f932-4430-af55-9d540fc03f62,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=ba34135c-f932-4430-af55-9d540fc03f62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa56d2dfe1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=54620 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa56d2dfe1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2814 identity=54620 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa56d2dfe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2814 identity=54620 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa56d2dfe1 endpointID=2814 k8sNamespace=openstack k8sPodName=keystone-db-init-rg8wk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ba34135c-f932-4430-af55-9d540fc03f62 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=ba34135c-f932-4430-af55-9d540fc03f62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aa56d2dfe1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2814 identity=54620 ipv4=10.0.0.175 ipv6= k8sPodName=openstack/keystone-db-init-rg8wk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 07d446f3-0680-4333-9ef2-78993f1cd907 default }" containerID=be1781f5ce4db01e255f52d28d8c8f3b4b9dd1af8062ebafa81c38332d54523e datapathConfiguration="&{false false false false false }" interface=lxcc4e9af8d0976 k8sPodName=openstack/keystone-fernet-setup-wnrvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=6101 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=6101 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be1781f5ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=6101 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=be1781f5ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=6101 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be1781f5ce endpointID=1080 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-wnrvk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=0caa6d1e-cc72-4e77-af1d-0d29669dcede k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=be1781f5ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=6101 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-fernet-setup-wnrvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 df741bea-594e-4cad-9f23-9479f1dc33e4 default }" containerID=c090ae0aa9c8bedc1af9cfc56ad65309cc25eacef769ae3aed5f36b674b1ac62 datapathConfiguration="&{false false false false false }" interface=lxc46860ae10ece k8sPodName=openstack/keystone-db-sync-4hv4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=10872 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=10872 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c090ae0aa9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=419 identity=10872 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c090ae0aa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=10872 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c090ae0aa9 endpointID=419 k8sNamespace=openstack k8sPodName=keystone-db-sync-4hv4w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=bb50622a-c7e0-4307-bb59-459d9581594e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c090ae0aa9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=10872 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-db-sync-4hv4w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 d6475408-622d-4f3d-8269-fc422e0660aa default }" containerID=c40bec4f87600812ea50cc36839fc7af1fb08656922db95c15092a5b468e3577 datapathConfiguration="&{false false false false false }" interface=lxc2578bd7270cd k8sPodName=openstack/keystone-rabbit-init-prjrz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c40bec4f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c40bec4f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c40bec4f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=8444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c40bec4f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=8444 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c40bec4f87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=468 identity=8444 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c40bec4f87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=8444 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c40bec4f87 endpointID=468 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-prjrz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3fbeba95-2967-4db3-b630-e03b3acf2988 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c40bec4f87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=8444 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/keystone-rabbit-init-prjrz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 84571909-275d-4b03-b6ce-401c75d17775 default }" containerID=22503040b0a7d6e813840c8dbf8a979f736bdf7f6a955db7984d024e998d22ed datapathConfiguration="&{false false false false false }" interface=lxcc4983843fb26 k8sPodName=openstack/keystone-domain-manage-6cccg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22503040b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22503040b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=22503040b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=30876 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22503040b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=840 identity=30876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22503040b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=840 identity=30876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=endpoint level=info msg="Successful endpoint creation" containerID=22503040b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=840 identity=30876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22503040b0 endpointID=840 k8sNamespace=openstack k8sPodName=keystone-domain-manage-6cccg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=db3af9cb-ba11-4aec-b366-271399e97d57 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=22503040b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=840 identity=30876 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/keystone-domain-manage-6cccg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 adc88caa-198f-4318-859d-a973a54db773 default }" containerID=45deb86df26c1eba4e892ee4e2227d1ddb936cd210d854ba3da7cb367b541bd1 datapathConfiguration="&{false false false false false }" interface=lxcd3b48ebe1583 k8sPodName=openstack/keystone-bootstrap-fvdrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45deb86df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45deb86df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45deb86df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=9069 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45deb86df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1823 identity=9069 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=45deb86df2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1823 identity=9069 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=45deb86df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1823 identity=9069 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45deb86df2 endpointID=1823 k8sNamespace=openstack k8sPodName=keystone-bootstrap-fvdrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=2ceb41fc-5a62-4ceb-b8d2-254de4b5d863 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=45deb86df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1823 identity=9069 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-bootstrap-fvdrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 7b0127e6-876c-4695-af25-2b1753e5d292 default }" containerID=96707d17f5e758b0533d2caf26780a96312f8ef319346499ca1ac8d9391d1e42 datapathConfiguration="&{false false false false false }" interface=lxcce3b3dbfeb28 k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96707d17f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96707d17f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96707d17f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96707d17f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=536 identity=54213 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96707d17f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=536 identity=54213 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=endpoint level=info msg="Successful endpoint creation" containerID=96707d17f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=54213 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=daemon level=info msg="Delete endpoint request" containerID=96707d17f5 endpointID=536 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=96707d17f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=536 identity=54213 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-41ad5335-99bd-43a0-b20b-01e38737f14b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 87b9ea02-fec0-4d67-9aad-debaaed02e54 default }" containerID=cde9e78baa97d85f64bbb02ca0a911c63f839ebf94685eb454936ee816614946 datapathConfiguration="&{false false false false false }" interface=lxcce3470158ef0 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde9e78baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde9e78baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde9e78baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=4652 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde9e78baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=4652 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cde9e78baa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=4652 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde9e78baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=4652 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035088668551408825 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.192 99c6398a-7965-4903-8e16-1ce8c79a4f1f default }" containerID=7530cce2a53d0d1b07cc312a54745a614ff4fd87d6336ee8435e61e1cb7fc26f datapathConfiguration="&{false false false false false }" interface=lxc0db89e0145b7 k8sPodName=openstack/barbican-api-74c874d5dc-blg4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7530cce2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7530cce2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7530cce2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=36835 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7530cce2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=36835 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7530cce2a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2360 identity=36835 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=7530cce2a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2360 identity=36835 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-api-74c874d5dc-blg4x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.24 aa6408b6-401e-40b8-9195-431a58e24a02 default }" containerID=20fab6c4052aa1db7ed3bf58ead7312587d9b87608131a41424ce7ec9e0c5e59 datapathConfiguration="&{false false false false false }" interface=lxcb23d11b41a82 k8sPodName=openstack/barbican-db-init-m59nr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20fab6c405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20fab6c405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20fab6c405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=37695 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20fab6c405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=37695 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20fab6c405 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=681 identity=37695 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=endpoint level=info msg="Successful endpoint creation" containerID=20fab6c405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=681 identity=37695 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20fab6c405 endpointID=681 k8sNamespace=openstack k8sPodName=barbican-db-init-m59nr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=2f27954b-aa30-4ae0-b64d-c3a1b6e62ca5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=20fab6c405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=681 identity=37695 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/barbican-db-init-m59nr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 b065de3c-e159-4635-b4d7-62381c9fd3d7 default }" containerID=6994193ba3cbb19632415ac3771dcbceae459f1c99f7c71090ecbd8759d73a04 datapathConfiguration="&{false false false false false }" interface=lxcbfdc9ff54285 k8sPodName=openstack/barbican-db-sync-dgwks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6994193ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6994193ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6994193ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=42902 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6994193ba3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=446 identity=42902 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6994193ba3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=446 identity=42902 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=endpoint level=info msg="Successful endpoint creation" containerID=6994193ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=446 identity=42902 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=daemon level=info msg="Delete endpoint request" containerID=6994193ba3 endpointID=446 k8sNamespace=openstack k8sPodName=barbican-db-sync-dgwks subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=666bd172-6a9e-4b1d-885f-c955768c71c7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6994193ba3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=446 identity=42902 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/barbican-db-sync-dgwks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 660f1ca5-8885-48af-8a6d-1f4b96d01b11 default }" containerID=f98c0f2d6bf66970f3a02202dae6100873da57455675b219aab8d5d0c04de3d5 datapathConfiguration="&{false false false false false }" interface=lxc463616783621 k8sPodName=openstack/barbican-rabbit-init-7lh2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f98c0f2d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f98c0f2d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f98c0f2d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=13988 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f98c0f2d6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2766 identity=13988 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f98c0f2d6b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2766 identity=13988 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f98c0f2d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=13988 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f98c0f2d6b endpointID=2766 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-7lh2m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=7a7509c8-eed0-4f55-b6ee-442d515d8b7e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f98c0f2d6b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2766 identity=13988 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/barbican-rabbit-init-7lh2m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 d7c5776a-5e32-47a8-8194-19670578e130 default }" containerID=fa203ace34b9171b9812d759e77cfd5a9e17fb260544562cdeb542d99a29f3c0 datapathConfiguration="&{false false false false false }" interface=lxcadaf6ea27567 k8sPodName=openstack/barbican-ks-service-psgr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa203ace34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa203ace34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa203ace34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=43666 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa203ace34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=43666 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fa203ace34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3247 identity=43666 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa203ace34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3247 identity=43666 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa203ace34 endpointID=3247 k8sNamespace=openstack k8sPodName=barbican-ks-service-psgr6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=d93faf1e-2532-49ac-9748-9292968e37ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fa203ace34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3247 identity=43666 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-service-psgr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 f742c231-e9b9-4114-b625-4372a9275b5f default }" containerID=a45beb38c362cdd7961ef26bc043f58a8dca91d290169dfacb5c6c2a1a0cbe4a datapathConfiguration="&{false false false false false }" interface=lxc1c678a5b300c k8sPodName=openstack/barbican-ks-endpoints-5zddz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=39820 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1204 identity=39820 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a45beb38c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1204 identity=39820 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a45beb38c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=39820 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a45beb38c3 endpointID=1204 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-5zddz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=aa6a3d95-62b9-47f0-a96e-484812863058 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a45beb38c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1204 identity=39820 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-endpoints-5zddz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 1d7ea9bd-0a41-47f9-bbba-b0814bbd2934 default }" containerID=b954825a519478a2fbb972e5d15d31fb84625e371c3292f4e6384eadfbd986a6 datapathConfiguration="&{false false false false false }" interface=lxc48e697b0d548 k8sPodName=openstack/barbican-ks-user-dvjzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b954825a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b954825a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b954825a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=64125 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b954825a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2102 identity=64125 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b954825a51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2102 identity=64125 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b954825a51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2102 identity=64125 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=daemon level=info msg="Delete endpoint request" containerID=b954825a51 endpointID=2102 k8sNamespace=openstack k8sPodName=barbican-ks-user-dvjzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=5228bdfb-c3bf-4ab2-87f1-bf17278c3f8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b954825a51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2102 identity=64125 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-user-dvjzn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.44 4466661e-3e92-4b77-8348-a63c99dc8dbd default }" containerID=ddc8a7f91a92c93a3493cb84276b65851350154172071537d9203b936ce40b70 datapathConfiguration="&{false false false false false }" interface=lxcb8d24cd6a163 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddc8a7f91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddc8a7f91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddc8a7f91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=11046 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddc8a7f91a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1043 identity=11046 ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ddc8a7f91a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1043 identity=11046 ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddc8a7f91a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1043 identity=11046 ipv4=10.0.0.44 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p77fv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.64 15061b2a-3b97-4c28-90a2-30aea6b3b3e9 default }" containerID=338492cafd0be0f03d27584f51f5a8f0ea5110b03457fca8657070afeb58e5b2 datapathConfiguration="&{false false false false false }" interface=lxc2ffacad7fbbf k8sPodName=openstack/rook-ceph-detect-version-dj6sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=13461 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1525 identity=13461 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=338492cafd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1525 identity=13461 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=338492cafd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1525 identity=13461 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=338492cafd endpointID=1525 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-dj6sr subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=50b40911-e8c9-47d6-9743-9f56f0e441d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=338492cafd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1525 identity=13461 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/rook-ceph-detect-version-dj6sr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 d1eaec36-8f75-4736-85ce-675bcfe843e5 default }" containerID=6de37fb53b88f148ad651f0fa9137ec3555e4b5d743e63134b379923371329b7 datapathConfiguration="&{false false false false false }" interface=lxcd9b4369c410b k8sPodName=openstack/ceph-object-controller-detect-version-72h4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6de37fb53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6de37fb53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=61163d80-da28-4ce3-937d-c524305a4090,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=61163d80-da28-4ce3-937d-c524305a4090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=61163d80-da28-4ce3-937d-c524305a4090;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=61163d80-da28-4ce3-937d-c524305a4090;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6de37fb53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=16597 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=61163d80-da28-4ce3-937d-c524305a4090,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=61163d80-da28-4ce3-937d-c524305a4090,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6de37fb53b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1743 identity=16597 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6de37fb53b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1743 identity=16597 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=6de37fb53b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1743 identity=16597 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6de37fb53b endpointID=1743 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-72h4q subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=61163d80-da28-4ce3-937d-c524305a4090 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=61163d80-da28-4ce3-937d-c524305a4090 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6de37fb53b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1743 identity=16597 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-72h4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d905fab9-e2dd-4431-9cd8-666400951382 default }" containerID=d3d5646ac74ee285331c41c7d62fea38c5bd486587f0fae7640d3bcbcc0148c5 datapathConfiguration="&{false false false false false }" interface=lxcfaa1caa93fa6 k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3d5646ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3d5646ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3d5646ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=54213 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3d5646ac7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=54213 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3d5646ac7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=621 identity=54213 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3d5646ac7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=54213 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=daemon level=info msg="Delete endpoint request" containerID=d3d5646ac7 endpointID=621 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d3d5646ac7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=54213 ipv4=10.0.0.166 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a54f579c-fe7d-4756-b8b8-ec5021d8c8cd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 9b3f6444-037a-47be-b76f-077e52c0440a default }" containerID=66b8c89ed71278b354bbb360764e5820881d560d8a49e052de731a33e3fab3a6 datapathConfiguration="&{false false false false false }" interface=lxc70ac33e02409 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=19677 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=19677 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66b8c89ed7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3189 identity=19677 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=66b8c89ed7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3189 identity=19677 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 7b7051fb-9450-47d9-b6af-89fb4b6cb53e default }" containerID=950e03f51c66bc66597a58499659826f972b8d0aee7996269689b96ec636db8b datapathConfiguration="&{false false false false false }" interface=lxcb7b464989f48 k8sPodName=openstack/glance-db-init-qhzbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=5238 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=5238 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=950e03f51c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=5238 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=950e03f51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=5238 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=950e03f51c endpointID=636 k8sNamespace=openstack k8sPodName=glance-db-init-qhzbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=1e698d06-c66b-483f-b7aa-79746d6084fe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=950e03f51c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=5238 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-qhzbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 b01e946f-e28e-42cc-9b83-3917818c6a13 default }" containerID=95cd1f43a74ae65b93a9b21203f3cb633a242265dd0152a74c8c90544fb0c84d datapathConfiguration="&{false false false false false }" interface=lxc7e515cf2bf58 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95cd1f43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95cd1f43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95cd1f43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=12292 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95cd1f43a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3085 identity=12292 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 f082fd39-0b9a-4aaf-b505-acae92e8a660 default }" containerID=ef2a1d61e6e6af3148d60ca6f010e538538722e86f2c7bcc8fcd53db9d2bbd7d datapathConfiguration="&{false false false false false }" interface=lxcee89fc4e6f4d k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef2a1d61e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef2a1d61e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef2a1d61e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=14078 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef2a1d61e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=14078 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95cd1f43a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3085 identity=12292 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=95cd1f43a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3085 identity=12292 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-42mrn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ef2a1d61e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1004 identity=14078 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef2a1d61e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1004 identity=14078 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-m6jj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 b2a2fbbf-72e0-40d9-86ba-e63d843e2e4d default }" containerID=72c4799a593db379155159a4c21481a4e1c009795b01c8f4ade9be704f0c16db datapathConfiguration="&{false false false false false }" interface=lxc66f991ba90d4 k8sPodName=openstack/glance-db-sync-ckhfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72c4799a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72c4799a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72c4799a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=45582 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72c4799a59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=45582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72c4799a59 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1195 identity=45582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=72c4799a59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1195 identity=45582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=72c4799a59 endpointID=1195 k8sNamespace=openstack k8sPodName=glance-db-sync-ckhfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=02cb1bb2-3a1d-4e42-8f48-881bfbfd639a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=72c4799a59 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1195 identity=45582 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-db-sync-ckhfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 1ff40028-1038-4589-b22a-f60758347b39 default }" containerID=a6ce8ce914b97f4c67924a6cbb4a6e08b2f194bf1d8fe924dba7351b8c1c65e0 datapathConfiguration="&{false false false false false }" interface=lxc87cb3f9bdb61 k8sPodName=openstack/glance-rabbit-init-kss2c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6ce8ce914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6ce8ce914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6ce8ce914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=19438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6ce8ce914 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=19438 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6ce8ce914 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1777 identity=19438 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6ce8ce914 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=19438 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6ce8ce914 endpointID=1777 k8sNamespace=openstack k8sPodName=glance-rabbit-init-kss2c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8bd47696-52ae-4144-bd2a-e0fce7f12dd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a6ce8ce914 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=19438 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-rabbit-init-kss2c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 5f1b8f3d-064d-46c7-a181-3a4bfcbafd4b default }" containerID=575ef062ce9b16969f6888fc1414a29162862e9350c36c3dc0829acf2dff6031 datapathConfiguration="&{false false false false false }" interface=lxc05d2ae299707 k8sPodName=openstack/glance-ks-service-2lstq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=575ef062ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=575ef062ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=575ef062ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=25858 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=575ef062ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=25858 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=575ef062ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=947 identity=25858 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=endpoint level=info msg="Successful endpoint creation" containerID=575ef062ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=25858 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=daemon level=info msg="Delete endpoint request" containerID=575ef062ce endpointID=947 k8sNamespace=openstack k8sPodName=glance-ks-service-2lstq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=54a56184-a4b8-4ccf-b5b8-f32882ad7850 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=575ef062ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=25858 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-service-2lstq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 30f4d2cd-972c-4a64-9740-fd7fe2cc58cd default }" containerID=c8b052d037e253fc8577f5713faaae3a66ea8fc8d3431b06e34310776a43671e datapathConfiguration="&{false false false false false }" interface=lxcce52a722e03c k8sPodName=openstack/glance-ks-endpoints-sxsjq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8b052d037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8b052d037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9548b230-0d62-440f-b1a1-42be3644627a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9548b230-0d62-440f-b1a1-42be3644627a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9548b230-0d62-440f-b1a1-42be3644627a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=9548b230-0d62-440f-b1a1-42be3644627a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8b052d037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=6364 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9548b230-0d62-440f-b1a1-42be3644627a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=9548b230-0d62-440f-b1a1-42be3644627a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c8b052d037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=6364 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8b052d037 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2173 identity=6364 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8b052d037 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2173 identity=6364 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c8b052d037 endpointID=2173 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-sxsjq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9548b230-0d62-440f-b1a1-42be3644627a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=9548b230-0d62-440f-b1a1-42be3644627a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c8b052d037 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2173 identity=6364 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/glance-ks-endpoints-sxsjq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 87e65a13-f621-494b-83e4-234083758edc default }" containerID=ca6db459a020ff08e675c2baf9055ae2ec7d0903b8180d7913c1e756400cc4e9 datapathConfiguration="&{false false false false false }" interface=lxcbee775e6759c k8sPodName=openstack/glance-ks-user-tz6gx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca6db459a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca6db459a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ca6db459a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=1668 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca6db459a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2483 identity=1668 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca6db459a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2483 identity=1668 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca6db459a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2483 identity=1668 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=daemon level=info msg="Delete endpoint request" containerID=ca6db459a0 endpointID=2483 k8sNamespace=openstack k8sPodName=glance-ks-user-tz6gx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=98d98c58-4cdd-40f4-bcc8-934e2be1edbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca6db459a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2483 identity=1668 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/glance-ks-user-tz6gx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 99d6a47c-a3b9-4f79-90cd-ff51f8296dfc default }" containerID=f13f2f010401246c8ed9834a68d008b15b2e501bed5ed9ed5d58e6d6a16a5f48 datapathConfiguration="&{false false false false false }" interface=lxc3a1b7aa2ee12 k8sPodName=openstack/glance-metadefs-load-ds2wx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=17894 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=17894 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f13f2f0104 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=396 identity=17894 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f13f2f0104 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=396 identity=17894 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f13f2f0104 endpointID=396 k8sNamespace=openstack k8sPodName=glance-metadefs-load-ds2wx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=666e1b63-d5e2-40a4-b4fe-7a173acf3327 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f13f2f0104 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=396 identity=17894 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-metadefs-load-ds2wx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 843d711a-7cff-4441-9857-8edcd4d59941 default }" containerID=c03f2790220ad943e36d402bad7df18d11226c7c8d5b42a22fbab1dddfec6287 datapathConfiguration="&{false false false false false }" interface=lxc669d8dad5a1e k8sPodName=openstack/glance-storage-init-29dl4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c03f279022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c03f279022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c03f279022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identity=59865 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c03f279022 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2163 identity=59865 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c03f279022 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2163 identity=59865 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c03f279022 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2163 identity=59865 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c03f279022 endpointID=2163 k8sNamespace=openstack k8sPodName=glance-storage-init-29dl4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=39a2440f-bba3-4308-8b0b-3c13cbebba08 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c03f279022 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2163 identity=59865 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-storage-init-29dl4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 79c39c8d-1226-4b68-9d72-949deefb1d23 default }" containerID=69f524b111cc50ded31687938e89e5179ac40a7babf4cc77997d6d75467c4d84 datapathConfiguration="&{false false false false false }" interface=lxc52fc80020c94 k8sPodName=openstack/glance-api-dbdb84999-vqtkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69f524b111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69f524b111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=69f524b111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=58369 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69f524b111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=58369 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69f524b111 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=58369 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=69f524b111 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=58369 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/glance-api-dbdb84999-vqtkm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 65c1d3b2-a580-4415-b873-77918d5e32e8 default }" containerID=6022f68715b9aed34d18150829f12ad941724edb5e8acfd2bcb45cd051939156 datapathConfiguration="&{false false false false false }" interface=lxc7329a8b956fd k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=34156 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=34156 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 9a9e4e29-faf2-4f31-a8c7-9be6d08f25e7 default }" containerID=d40ad19705f5c45d0f88ba5b186b640e7a64dff4766928102c3bbe1858e024e8 datapathConfiguration="&{false false false false false }" interface=lxc0a26c96db7c6 k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d40ad19705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d40ad19705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.177 2977b52d-22dd-434d-b3d0-29ffbbaa3223 default }" containerID=02cc9475c50a90df9a74fd8151d51671efc7fa5d7ecfef179e58d8ac683743ad datapathConfiguration="&{false false false false false }" interface=lxcad3e902e196d k8sPodName=openstack/staffeln-db-init-gdcvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02cc9475c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02cc9475c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e6f0732-841e-42c9-9633-75d478652d55,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e6f0732-841e-42c9-9633-75d478652d55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d40ad19705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=11399 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d40ad19705 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=11399 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1e6f0732-841e-42c9-9633-75d478652d55;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1e6f0732-841e-42c9-9633-75d478652d55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02cc9475c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=56175 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1e6f0732-841e-42c9-9633-75d478652d55,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1e6f0732-841e-42c9-9633-75d478652d55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02cc9475c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1808 identity=56175 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6022f68715 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=304 identity=34156 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=6022f68715 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=304 identity=34156 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/staffeln-api-57679f4d6f-9j7ks subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02cc9475c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1808 identity=56175 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=02cc9475c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1808 identity=56175 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d40ad19705 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2321 identity=11399 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts subsys=endpoint level=info msg="Successful endpoint creation" containerID=d40ad19705 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2321 identity=11399 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/staffeln-conductor-57fcc84dd6-56kts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02cc9475c5 endpointID=1808 k8sNamespace=openstack k8sPodName=staffeln-db-init-gdcvk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1e6f0732-841e-42c9-9633-75d478652d55 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1e6f0732-841e-42c9-9633-75d478652d55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=02cc9475c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1808 identity=56175 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/staffeln-db-init-gdcvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 1ed720db-1c57-48c5-a594-9379a2903dc0 default }" containerID=70e9c26e19231500f77e14e4f94fd4cc75d6d17941049d6a119f0dd389921966 datapathConfiguration="&{false false false false false }" interface=lxc50f980d46833 k8sPodName=openstack/staffeln-db-sync-bssw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=37629 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0fb1f52c-1b6c-4c60-a7d5-61fbd064c3a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=37629 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70e9c26e19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=103 identity=37629 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70e9c26e19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=103 identity=37629 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/staffeln-db-sync-bssw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager