level=info msg="Memory available for map entries (0.003% of 16764964864B): 41912412B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.065709ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="59.042µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.012948ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.1µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.998142ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.04µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.56µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="70.533µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="61.213µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.082µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="424.556µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.469698ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.986631ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="58.382µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="36.771µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="708.207µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="158.416µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="98.983µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.552595ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="112.634µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.4.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.096179ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="2.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.071373ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.21175ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="51.242µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="18.65µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="49.432µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="285.73µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.87µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="828.36µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="464.186µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.08076ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="29.841µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.4 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.4 ipAddr.ipv6="" k8sNodeIP=199.204.45.4 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.4" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.88" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.4" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.4} {CiliumInternalIP 10.0.0.88}] 10.0.0.0/24 [] [] 10.0.0.248 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:33653" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.368329938s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="127.085µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.43µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="30.151µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.05µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.3145933s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=299.991282ms file-path=/var/run/cilium/state/templates/58b5f2ceb9adc499417212c9c3651e59f8d71758bc54e78432b25980524c7e32/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.158 6be5db13-4761-4851-8ff3-435dcbb37364 default }" containerID=975c84f3d85621e8780ec8cfd0a8248e83c7a589062126a4839f4ea9a72a6509 datapathConfiguration="&{false false false false false }" interface=lxcc5f50f1b7554 k8sPodName=kube-system/coredns-7c96b6546b-rb9kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=975c84f3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=975c84f3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=975c84f3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=23368 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=975c84f3d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2560 identity=23368 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 316bf731-2b46-4a14-9099-c76b98688814 default }" containerID=0bc24ebd5a647302e1bf4b29d8f6895d625ebf84156a22f78560e41b1bef5a2d datapathConfiguration="&{false false false false false }" interface=lxc179c7848f362 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bc24ebd5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bc24ebd5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bc24ebd5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=15400 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bc24ebd5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1386 identity=15400 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=115 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 ipv4=10.0.0.248 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identityLabels="reserved:health" ipv4=10.0.0.248 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=887 identity=4 identityLabels="reserved:health" ipv4=10.0.0.248 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.086757179s file-path=/var/run/cilium/state/templates/7697f18afe97c0ab7b3e3aaa6bd4b027f1af36c9be4ae2427d777f519bdb1985/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=887 identity=4 ipv4=10.0.0.248 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bc24ebd5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1386 identity=15400 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bc24ebd5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1386 identity=15400 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=975c84f3d8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2560 identity=23368 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=975c84f3d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2560 identity=23368 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0bc24ebd5a endpointID=1386 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-wwc6c subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=4cfd05ae-e9e8-4e86-bbd4-e32b13ded4fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=0bc24ebd5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1386 identity=15400 ipv4=10.0.0.149 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wwc6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 a79845bb-b46f-47bb-b617-e3b65e0b49ca default }" containerID=63d73d966c6e9713ff219608432bea5baf11eb1dbb444893b84422371839e84b datapathConfiguration="&{false false false false false }" interface=lxc96da79a50161 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=33904 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=33904 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63d73d966c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=443 identity=33904 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt subsys=endpoint level=info msg="Successful endpoint creation" containerID=63d73d966c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=443 identity=33904 ipv4=10.0.0.157 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-zclnt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=115 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00115 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00115 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00115 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00115:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=115 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 fb1a4c76-27ed-4894-9091-e2bc7f3013fe default }" containerID=74e0fdcb502cf96cd9940c36e9257250440d8137882d73132e33dee744c3c776 datapathConfiguration="&{false false false false false }" interface=lxce7511e27bb87 k8sPodName=kube-system/coredns-67659f764b-w2888 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74e0fdcb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74e0fdcb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=74e0fdcb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=23368 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74e0fdcb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=23368 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74e0fdcb50 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=946 identity=23368 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74e0fdcb50 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=946 identity=23368 ipv4=10.0.0.106 ipv6= k8sPodName=kube-system/coredns-67659f764b-w2888 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 8cdbb858-2471-4537-9125-c26fcb1468fe default }" containerID=8a57f903490e1bba44a5093f396ac13304a19c11658d46bb9f213e267a51967d datapathConfiguration="&{false false false false false }" interface=lxc89f1aa8af5a5 k8sPodName=kube-system/coredns-67659f764b-v96np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a57f90349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a57f90349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8a57f90349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=23368 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a57f90349 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=23368 ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a57f90349 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1168 identity=23368 ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a57f90349 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1168 identity=23368 ipv4=10.0.0.199 ipv6= k8sPodName=kube-system/coredns-67659f764b-v96np subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 95c4998c-cfbf-4f12-9831-2ed15bdafdc5 default }" containerID=8add716eb0a28105092c14f85419534e30c9a1467e1aa357f67b9e8af4290b18 datapathConfiguration="&{false false false false false }" interface=lxccce79c92f74c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=51305 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=51305 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8add716eb0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=504 identity=51305 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8add716eb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=504 identity=51305 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vd4hc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=975c84f3d8 endpointID=2560 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rb9kk subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=975c84f3d8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2560 identity=23368 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rb9kk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 5d7a0ab8-f3a4-4250-8d12-0668d3de14a1 default }" containerID=2d5acc63d912424e4decf2c862818b4fc9fce9934abae18e3f41830e57ab1211 datapathConfiguration="&{false false false false false }" interface=lxced8de018db46 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d5acc63d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d5acc63d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d5acc63d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=57944 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d5acc63d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1263 identity=57944 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 5718cc9b-d2f2-4605-b3d4-86778f3760c6 default }" containerID=f1aee5b55817ad27babe49f3c509cb5a4dd00af5dd81a53864ff49b4ee775825 datapathConfiguration="&{false false false false false }" interface=lxc8ba09762fd31 k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1aee5b558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1aee5b558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1aee5b558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=30368 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1aee5b558 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3330 identity=30368 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d5acc63d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1263 identity=57944 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d5acc63d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1263 identity=57944 ipv4=10.0.0.80 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-qpprm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 09322945-3f02-450c-9f17-9100a12949dc default }" containerID=b955a26e0112909685fb401a4b726d0c952a39bfe130ab2a0e1f1bca2bb9db9b datapathConfiguration="&{false false false false false }" interface=lxc88b79bfa572b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b955a26e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b955a26e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b955a26e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=2173 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b955a26e01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=2173 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1aee5b558 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3330 identity=30368 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1aee5b558 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3330 identity=30368 ipv4=10.0.0.211 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-krlgg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b955a26e01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2408 identity=2173 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=b955a26e01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2408 identity=2173 ipv4=10.0.0.126 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-ddr4t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.190 94b87ef5-5f09-4016-95ea-21f20254166e default }" containerID=87518c47378d5af72e42107f301befc93aac37b432732fa64843eda274dc64b2 datapathConfiguration="&{false false false false false }" interface=lxc70296e6e02d6 k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87518c4737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87518c4737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87518c4737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=3599 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87518c4737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=3599 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87518c4737 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1840 identity=3599 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=87518c4737 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1840 identity=3599 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87518c4737 endpointID=1840 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-jplxp subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=cb039a9a-7c04-41df-bb78-b1e67a52e60b k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=87518c4737 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1840 identity=3599 ipv4=10.0.0.190 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-jplxp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 9c465472-5d30-4218-8187-c79ffc791c66 default }" containerID=9872f5def3098a76484588f66272e75554d05ce9049b697a67290789e4cf3d82 datapathConfiguration="&{false false false false false }" interface=lxccef3cad36868 k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identity=43685 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3355 identity=43685 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9872f5def3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3355 identity=43685 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9872f5def3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3355 identity=43685 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9872f5def3 endpointID=3355 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2tp54 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=37cccb46-03cb-4faa-bd90-4f8cd9658941 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=9872f5def3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3355 identity=43685 ipv4=10.0.0.24 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2tp54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 14550338-e0df-4849-94f0-67a39d4c2c49 default }" containerID=01aa1714740f397adefcb97185a542969bd0fad7f35daadcbf27c95becdbb0fa datapathConfiguration="&{false false false false false }" interface=lxc01b9ab08a925 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=43340 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2546 identity=43340 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01aa171474 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2546 identity=43340 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl subsys=endpoint level=info msg="Successful endpoint creation" containerID=01aa171474 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2546 identity=43340 ipv4=10.0.0.141 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-tl2hl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.217 afc9dc29-59fe-4b35-b5bd-4d1b16957977 default }" containerID=a16e420e5a68b265de776d204cb478d8027d204942f2d140869b764e4a09ac6a datapathConfiguration="&{false false false false false }" interface=lxc22dec4f986df k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a16e420e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a16e420e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a16e420e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=1027 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a16e420e5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=1027 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a16e420e5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=506 identity=1027 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a16e420e5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=506 identity=1027 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a16e420e5a endpointID=506 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-n287t subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6a6a5dfb-3ab6-4e72-83e4-ddc33e8c01fb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=a16e420e5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=506 identity=1027 ipv4=10.0.0.217 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n287t subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0e99afb0-1d92-4225-861c-8393bee0db71] Description:}]" policyAddRequest=e7ef6270-3e9d-4c6b-ad04-cc558cf2f083 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e7ef6270-3e9d-4c6b-ad04-cc558cf2f083 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=80ea199f-2ee9-4421-bbdb-e08c2390572a] Description:}]" policyAddRequest=9fa9868e-8834-4021-a269-1775d20e5394 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=9fa9868e-8834-4021-a269-1775d20e5394 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 c64beee8-e410-407f-ac94-ce63503a00e5 default }" containerID=adec5e40dab403f1463670936f78b194b034b9844278f1a16ebfcb10bba33e2d datapathConfiguration="&{false false false false false }" interface=lxc85300b031478 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identity=63170 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3625 identity=63170 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adec5e40da datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3625 identity=63170 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq subsys=endpoint level=info msg="Successful endpoint creation" containerID=adec5e40da datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3625 identity=63170 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-4t9hq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 bcb30363-b001-4c3e-8fc7-11e925371657 default }" containerID=043fb19bfb635bd1feb4c1bfadd8ecf29831cfab22128466ba568cbed217a753 datapathConfiguration="&{false false false false false }" interface=lxc5c735b08ed81 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=043fb19bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=043fb19bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=043fb19bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=46420 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=043fb19bfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=46420 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=043fb19bfb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=200 identity=46420 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=043fb19bfb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=200 identity=46420 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-pmmrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 850b05c8-6f97-49bd-a21d-154c6d8d4a79 default }" containerID=cd8ec825dd13e4f5bc398c5ea5df5010117d3993827baa5eb213def458204d08 datapathConfiguration="&{false false false false false }" interface=lxce80de5f55d00 k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd8ec825dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd8ec825dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd8ec825dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=22118 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd8ec825dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=412 identity=22118 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd8ec825dd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=412 identity=22118 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd8ec825dd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=412 identity=22118 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7wrbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 2d6e9c4a-5981-4620-972e-f001c1a19237 default }" containerID=a4f1225d7baeb64d416125db84f6ae8b165f2a8493e43c2910773c13367aa3b8 datapathConfiguration="&{false false false false false }" interface=lxcb288de86dc24 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a4f1225d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a4f1225d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a4f1225d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=17414 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a4f1225d7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=17414 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a4f1225d7b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=212 identity=17414 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a4f1225d7b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=212 identity=17414 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.91 42b9ee2b-af83-41c3-a3c1-ca99405e6d30 default }" containerID=4b1022704e2aeeeca30f3a9cb195fe91186fa354b6c38f7d35733021ef00b23c datapathConfiguration="&{false false false false false }" interface=lxca0bb455d17f1 k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b1022704e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b1022704e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b1022704e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b1022704e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=6049 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b1022704e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=868 identity=6049 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b1022704e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=868 identity=6049 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4b1022704e endpointID=868 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4b1022704e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=868 identity=6049 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fd1bdce1-9448-4761-9859-4bbd5998a105 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 1839125d-600f-4cd0-ae41-10c7460f1da8 default }" containerID=80b1879b719c6f0e1c4fa435676fbe890b635499cf9aea03b9cf357124332bbe datapathConfiguration="&{false false false false false }" interface=lxc20904922ce6e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80b1879b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80b1879b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80b1879b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=29106 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80b1879b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=103 identity=29106 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80b1879b71 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=103 identity=29106 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80b1879b71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=103 identity=29106 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.153 1b083a78-377b-4ef3-93c5-a47dfe1d4670 default }" containerID=1e585ebae56575fff7d1f2c402883dcae490f7688cce01a596e1cfc53e6c41c9 datapathConfiguration="&{false false false false false }" interface=lxc0a1088296e49 k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e585ebae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e585ebae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e585ebae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=11851 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e585ebae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3985 identity=11851 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e585ebae5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3985 identity=11851 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e585ebae5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3985 identity=11851 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-bhphn subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ccdfda48-fdd1-4e54-9439-6e47292af512] Description:}]" policyAddRequest=8a4c2b54-acfb-4450-8519-710c316131cf subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8a4c2b54-acfb-4450-8519-710c316131cf policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.202 5b0653a5-35b8-4e2c-9c97-7d863468f900 default }" containerID=6641fc9883d951717d9f972a990c387fd50316f75a1e55bb5d4d27cbe8473ad1 datapathConfiguration="&{false false false false false }" interface=lxcc844415c963e k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6641fc9883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6641fc9883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6641fc9883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identity=17838 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6641fc9883 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3568 identity=17838 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6641fc9883 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3568 identity=17838 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6641fc9883 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3568 identity=17838 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04143886848905209 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.66 b335c8ee-c504-478c-8130-86d9662dff05 default }" containerID=273ae6a5caa40d54a99c917486c0faab29607653e44c636fdab4cd4ebe634a28 datapathConfiguration="&{false false false false false }" interface=lxc6fc33df26262 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=31494 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=602 identity=31494 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=273ae6a5ca datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=602 identity=31494 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj subsys=endpoint level=info msg="Successful endpoint creation" containerID=273ae6a5ca datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=602 identity=31494 ipv4=10.0.0.66 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z8klj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 c898012b-2e28-4579-97c4-910f864bf17d default }" containerID=8abf3daddc584415ffeca158e9a4a82d1ae0d34132681a7d93fca9339668c583 datapathConfiguration="&{false false false false false }" interface=lxcb05ed6ae144c k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8abf3daddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8abf3daddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62bea71d-e29e-4099-a969-ac17b5009333,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62bea71d-e29e-4099-a969-ac17b5009333,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=62bea71d-e29e-4099-a969-ac17b5009333;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=62bea71d-e29e-4099-a969-ac17b5009333;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8abf3daddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=62994 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62bea71d-e29e-4099-a969-ac17b5009333,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=62bea71d-e29e-4099-a969-ac17b5009333,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8abf3daddc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=62994 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8abf3daddc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=759 identity=62994 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=8abf3daddc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=759 identity=62994 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8abf3daddc endpointID=759 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-knw6m subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=62bea71d-e29e-4099-a969-ac17b5009333 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=62bea71d-e29e-4099-a969-ac17b5009333 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8abf3daddc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=759 identity=62994 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-knw6m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 2ab73b62-05c7-468b-89ce-3814a6d66586 default }" containerID=1dbbbe7b0cf9cc49658db741829b5d05271993e2002eaddfbe67552da2789a3b datapathConfiguration="&{false false false false false }" interface=lxc7a270386b185 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dbbbe7b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dbbbe7b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dbbbe7b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=2901 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dbbbe7b0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2438 identity=2901 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 431a5033-3265-44b2-adce-22ee2925f155 default }" containerID=aabd6612de245d2260b8d1522c3d15a7d83a15b7cd0a6dcb28529c19b17b54a0 datapathConfiguration="&{false false false false false }" interface=lxcbd861a6c7d1b k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aabd6612de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aabd6612de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.212 787cb7d4-ee14-4be2-8056-65646b4767ad default }" containerID=de4aae36c5369a535ceb1ee32caf764acdfa0b5b0bc67e412866c2bd6400c02d datapathConfiguration="&{false false false false false }" interface=lxc159b42ee18ff k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de4aae36c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aabd6612de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=54782 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aabd6612de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=596 identity=54782 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de4aae36c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de4aae36c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=34692 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de4aae36c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1539 identity=34692 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dbbbe7b0c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2438 identity=2901 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dbbbe7b0c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2438 identity=2901 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cxmwn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aabd6612de datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=596 identity=54782 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch subsys=endpoint level=info msg="Successful endpoint creation" containerID=aabd6612de datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=596 identity=54782 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-54c4fdf879-lbhch subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de4aae36c5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1539 identity=34692 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de4aae36c5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1539 identity=34692 ipv4=10.0.0.212 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xcfc5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.249 feaf2caf-2764-4acc-a8cb-0672189f0522 default }" containerID=f226d4242fd37ba85e801661a1e768e499710a6805e44f75f2cba05572ecdbf9 datapathConfiguration="&{false false false false false }" interface=lxc1a43f6a7dab4 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f226d4242f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f226d4242f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f226d4242f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=25275 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f226d4242f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=25275 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f226d4242f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2639 identity=25275 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f226d4242f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2639 identity=25275 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 d2a95ee7-3d6a-4c31-a02b-7c3593bdf0cd default }" containerID=61d19c216e375770ed41cf36c7695cdc366f6b090d4c9d051dce873d284a4816 datapathConfiguration="&{false false false false false }" interface=lxc5756ea7dd414 k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61d19c216e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61d19c216e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61d19c216e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61d19c216e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2148 identity=6049 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61d19c216e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2148 identity=6049 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61d19c216e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2148 identity=6049 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 1932676b-7f52-4c9d-8038-d1f4e3de9cf3 default }" containerID=7647fc4ca09f21e75d3ef89804d1e3756f22d34f3a878899d0516dfcabe07c69 datapathConfiguration="&{false false false false false }" interface=lxcb37272b87063 k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7647fc4ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7647fc4ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7647fc4ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7647fc4ca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=6049 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7647fc4ca0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=893 identity=6049 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=endpoint level=info msg="Successful endpoint creation" containerID=7647fc4ca0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=893 identity=6049 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=daemon level=info msg="Delete endpoint request" containerID=f226d4242f endpointID=2639 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bx874 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d2a6d98d-b468-4406-8a7b-0a0991737095 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=f226d4242f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2639 identity=25275 ipv4=10.0.0.249 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bx874 subsys=endpoint level=info msg="Delete endpoint request" containerID=7647fc4ca0 endpointID=893 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=61d19c216e endpointID=2148 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7647fc4ca0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=893 identity=6049 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1be351f0-872f-470b-82ae-d25a5036c21f subsys=endpoint level=info msg="Removed endpoint" containerID=61d19c216e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2148 identity=6049 ipv4=10.0.0.45 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-204b8a37-89c9-49dc-b2e6-d36598c40a83 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 8a8f6b47-99eb-4fea-9178-31fd1b321b3b default }" containerID=6448eea55017e945f05f1c5a6f368e0c26e0555042fb5273b0eb26c649582a78 datapathConfiguration="&{false false false false false }" interface=lxc2e44411c50c9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=28026 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=28026 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6448eea550 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1337 identity=28026 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6448eea550 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1337 identity=28026 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 34450836-f6a4-4c55-8570-319e94582e64 default }" containerID=4cacbaf6b242c01dca266c27e69fbb48792a9da595c4c81ff5cab4aa62e685f1 datapathConfiguration="&{false false false false false }" interface=lxc11eed9019bf0 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cacbaf6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cacbaf6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cacbaf6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=15748 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cacbaf6b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=15748 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cacbaf6b2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=925 identity=15748 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cacbaf6b2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=925 identity=15748 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.112 42de8531-c70a-46a9-b30c-de3477383e42 default }" containerID=23618001f5acb5b2e8629c75cad3ed58a882bd63ccc9c6564c5ed35d0a63e24d datapathConfiguration="&{false false false false false }" interface=lxc061bd4a56036 k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23618001f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23618001f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23618001f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=6049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23618001f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=6049 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23618001f5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=131 identity=6049 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=endpoint level=info msg="Successful endpoint creation" containerID=23618001f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=131 identity=6049 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=daemon level=info msg="Delete endpoint request" containerID=23618001f5 endpointID=131 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=23618001f5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=131 identity=6049 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-316e5179-598c-4ab0-942b-8b074fec364f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 556bcea5-b2f7-4143-8174-b207708002e5 default }" containerID=7fb698d606ca76116e48741ffd18c03387c04e959961f14489c6326fc72224c3 datapathConfiguration="&{false false false false false }" interface=lxca294ca41f18a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fb698d606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fb698d606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7fb698d606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=25190 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fb698d606 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=620 identity=25190 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7fb698d606 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=620 identity=25190 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fb698d606 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=620 identity=25190 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 13d11146-79a8-488f-8468-801563cc83e6 default }" containerID=631a3810e0e7b3f014bb3bea15a26a461f46e9955e81fa882399468f5df43096 datapathConfiguration="&{false false false false false }" interface=lxcea07ccfce785 k8sPodName=openstack/keystone-api-689749757b-ms55b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=631a3810e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=631a3810e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=631a3810e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=19159 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=631a3810e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=19159 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=631a3810e0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=101 identity=19159 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b subsys=endpoint level=info msg="Successful endpoint creation" containerID=631a3810e0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=101 identity=19159 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/keystone-api-689749757b-ms55b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 2a93cc57-278f-4b15-aed2-03be27268e94 default }" containerID=aefb1bc7f6f4edf4e09b7eaf0a7a33fffe2822ba876ca05efbb69564b7e037a7 datapathConfiguration="&{false false false false false }" interface=lxcdae8368a257e k8sPodName=openstack/keystone-credential-setup-rx4z2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aefb1bc7f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aefb1bc7f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08a49ff5-9877-4659-ba09-ade560481572,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=08a49ff5-9877-4659-ba09-ade560481572,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=08a49ff5-9877-4659-ba09-ade560481572;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=08a49ff5-9877-4659-ba09-ade560481572;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aefb1bc7f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identity=15420 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08a49ff5-9877-4659-ba09-ade560481572,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=08a49ff5-9877-4659-ba09-ade560481572,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aefb1bc7f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3542 identity=15420 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aefb1bc7f6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3542 identity=15420 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aefb1bc7f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3542 identity=15420 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aefb1bc7f6 endpointID=3542 k8sNamespace=openstack k8sPodName=keystone-credential-setup-rx4z2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=08a49ff5-9877-4659-ba09-ade560481572 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=08a49ff5-9877-4659-ba09-ade560481572 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=aefb1bc7f6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3542 identity=15420 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/keystone-credential-setup-rx4z2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 d9cbc067-9616-474e-98df-665d3b42ffa9 default }" containerID=1bf1c46e7e4748c98d1a9025ad04f404336eb523f68689a3c1e3f08758d748ec datapathConfiguration="&{false false false false false }" interface=lxcef0d74bc03bb k8sPodName=openstack/keystone-db-init-nr4st labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=3526 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=515 identity=3526 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bf1c46e7e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=515 identity=3526 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bf1c46e7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=515 identity=3526 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1bf1c46e7e endpointID=515 k8sNamespace=openstack k8sPodName=keystone-db-init-nr4st subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=415de5c9-31b3-4788-9498-ef15717b80d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1bf1c46e7e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=515 identity=3526 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/keystone-db-init-nr4st subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 437801b5-f4c3-421a-b576-bd01d6961c3c default }" containerID=fe2a355e4aa38733978b87a19c99398437f4741e80b3516b456ca46032635bec datapathConfiguration="&{false false false false false }" interface=lxc9d510acc2b2a k8sPodName=openstack/keystone-fernet-setup-b2kvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe2a355e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe2a355e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fe2a355e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=47334 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe2a355e4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=47334 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe2a355e4a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2091 identity=47334 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe2a355e4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2091 identity=47334 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe2a355e4a endpointID=2091 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-b2kvq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9062d2d3-6831-4667-a2c6-49a5596e4ea9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fe2a355e4a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2091 identity=47334 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/keystone-fernet-setup-b2kvq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 b31d8dce-d8e5-477e-9e38-687a7a26bde3 default }" containerID=f6e1fe49b7de3bce5a806410de0061ef3943cdc654931593c4ae7bb4f22c9318 datapathConfiguration="&{false false false false false }" interface=lxc669e4de3aa67 k8sPodName=openstack/keystone-db-sync-f4knm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=5532 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=5532 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6e1fe49b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=390 identity=5532 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6e1fe49b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=390 identity=5532 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6e1fe49b7 endpointID=390 k8sNamespace=openstack k8sPodName=keystone-db-sync-f4knm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=b77163d8-5bd7-4236-9e17-d432e45d313c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f6e1fe49b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=390 identity=5532 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-db-sync-f4knm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 5defce63-6fad-4259-b318-c4fc4ea6d337 default }" containerID=956711933783457681be840572b3a1facbe1edeff6cc5c129bddb587e637d2aa datapathConfiguration="&{false false false false false }" interface=lxc96c7c12cf5cd k8sPodName=openstack/keystone-rabbit-init-bhpm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9567119337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9567119337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9567119337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=28090 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9567119337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=677 identity=28090 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9567119337 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=677 identity=28090 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9567119337 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=677 identity=28090 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9567119337 endpointID=677 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-bhpm4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2d671668-9f74-4b5b-a593-0540ec57bac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9567119337 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=677 identity=28090 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-rabbit-init-bhpm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 169345f7-cf6b-4045-8980-9847145809de default }" containerID=17743a9e24960d7c4b3b2e62d2c039fbfd3d7baca488364848dbd84ad0123b18 datapathConfiguration="&{false false false false false }" interface=lxc2e4acd943510 k8sPodName=openstack/keystone-domain-manage-qbcwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17743a9e24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17743a9e24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17743a9e24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=4590 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17743a9e24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=4590 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=17743a9e24 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2685 identity=4590 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=17743a9e24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2685 identity=4590 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17743a9e24 endpointID=2685 k8sNamespace=openstack k8sPodName=keystone-domain-manage-qbcwv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=63a2e14a-8f5e-43d8-8aff-6b8026956acc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=17743a9e24 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2685 identity=4590 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-domain-manage-qbcwv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 b0db208b-6242-411f-9a85-ec0fa4e7684a default }" containerID=966e9fb382b7db3ade1ff6cd8ddba8086d596965d85f21ea55e85f719ada66ba datapathConfiguration="&{false false false false false }" interface=lxcff38e2947bb3 k8sPodName=openstack/keystone-bootstrap-wl45f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=966e9fb382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=966e9fb382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=966e9fb382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=46545 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=966e9fb382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1433 identity=46545 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=966e9fb382 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1433 identity=46545 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=endpoint level=info msg="Successful endpoint creation" containerID=966e9fb382 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1433 identity=46545 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=966e9fb382 endpointID=1433 k8sNamespace=openstack k8sPodName=keystone-bootstrap-wl45f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=9c0cd8ef-2c62-4c6c-803f-4c1e2ead82ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=966e9fb382 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1433 identity=46545 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/keystone-bootstrap-wl45f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 1fe115a1-fc43-4fba-b091-b6314e1b98cd default }" containerID=57506759520565c2c1ac01819ad71c021a9bae4f1923e47052469796687b7ac3 datapathConfiguration="&{false false false false false }" interface=lxcfa4dca68ad15 k8sPodName=openstack/horizon-544f65bd59-8dk2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5750675952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5750675952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5750675952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=19835 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5750675952 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3190 identity=19835 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 94ef441d-9e32-4f81-a812-ec901e3ed5c4 default }" containerID=cd32a2d33ac85259bded26b4fe487c582f1aafc80ad169b96426badd8401830a datapathConfiguration="&{false false false false false }" interface=lxcff37f207c072 k8sPodName=openstack/horizon-544f65bd59-4mcp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd32a2d33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 2eaf5a9b-4aa2-4515-b817-8e579837f779 default }" containerID=db2a8a172bb1a04c870b5c4e542248e91edf5288699484f8faa07e1ab2f9cc06 datapathConfiguration="&{false false false false false }" interface=lxc4cdecb4f2844 k8sPodName=openstack/horizon-544f65bd59-twbbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db2a8a172b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd32a2d33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db2a8a172b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cd32a2d33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=19835 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=db2a8a172b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=19835 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db2a8a172b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=19835 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd32a2d33a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=19835 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 31fa71f4-c778-4cf5-b66e-4b5ffa7a035d default }" containerID=749c69577eaf0c6bfab1bc62436aa1e0eab153caa1415191950e5ff57ef6df6c datapathConfiguration="&{false false false false false }" interface=lxc3a97b02eccbc k8sPodName=openstack/horizon-db-init-g9grp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=749c69577e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=749c69577e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=749c69577e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=42385 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=749c69577e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=883 identity=42385 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5750675952 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3190 identity=19835 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=5750675952 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3190 identity=19835 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/horizon-544f65bd59-8dk2j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cd32a2d33a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1151 identity=19835 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd32a2d33a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1151 identity=19835 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/horizon-544f65bd59-4mcp8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=db2a8a172b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=593 identity=19835 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=db2a8a172b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=593 identity=19835 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/horizon-544f65bd59-twbbv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=749c69577e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=883 identity=42385 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=endpoint level=info msg="Successful endpoint creation" containerID=749c69577e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=883 identity=42385 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=749c69577e endpointID=883 k8sNamespace=openstack k8sPodName=horizon-db-init-g9grp subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=45080833-54f4-4ac2-9db4-49f9107e10e1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=749c69577e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=883 identity=42385 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/horizon-db-init-g9grp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 c6ad451f-d993-42d4-bda5-6eb00ce7a42a default }" containerID=491d3ceab088766622c6124565396933af975fc69ded65904c53d37eb8148490 datapathConfiguration="&{false false false false false }" interface=lxc9529e6458bca k8sPodName=openstack/horizon-db-sync-vzbwj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=491d3ceab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=491d3ceab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=491d3ceab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=32790 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=491d3ceab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=32790 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=491d3ceab0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2173 identity=32790 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=endpoint level=info msg="Successful endpoint creation" containerID=491d3ceab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2173 identity=32790 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=491d3ceab0 endpointID=2173 k8sNamespace=openstack k8sPodName=horizon-db-sync-vzbwj subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=f85f665a-542d-47fd-882b-e363fdf7935d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=491d3ceab0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2173 identity=32790 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-sync-vzbwj subsys=endpoint