level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.22258ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="256.038µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.135957ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="5.171µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=124.421133ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="44.101µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.501µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="83.923µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="89.273µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="101.393µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="439.894µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.45µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.945434ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.939357ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="42.012µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="37.141µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="223.848µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="86.963µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="61.832µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.188133ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="95.794µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.109.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=105.972939ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="10.641µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.36751ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.99µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.719852ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="1.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="18.451µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.21µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="14.64µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="253.478µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.27µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="251.989µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="580.098µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.488117ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.79µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.641µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.109 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.109 ipAddr.ipv6="" k8sNodeIP=199.204.45.109 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.109" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.98" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.109" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.109} {CiliumInternalIP 10.0.0.98}] 10.0.0.0/24 [] [] 10.0.0.161 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40617" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.538109302s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="20.301µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="9.18µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="40.641µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="32.791µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=605 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.472886308s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=313.575107ms file-path=/var/run/cilium/state/templates/875a726488c1cf6e9dc98a7de2b22e7ae0ec04e77b74ad394fbf00b3a2576e00/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=605 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.161 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="reserved:health" ipv4=10.0.0.161 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=4 identityLabels="reserved:health" ipv4=10.0.0.161 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.097574802s file-path=/var/run/cilium/state/templates/ff0374c2a2fd0b2353cfc2c77dd9c648e7f2eb30b5a205ab6cbfdee54563862a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1133 identity=4 ipv4=10.0.0.161 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 ee301d8b-94b2-43d7-a138-1d182d2340ec default }" containerID=88164ff4a0fa34fb37b0c5e765b55abd3de9195ec2daf93b1484f48792070f1c datapathConfiguration="&{false false false false false }" interface=lxcada7cdfeb524 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88164ff4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88164ff4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.29 3052175e-f745-4d70-90df-5fcfc310682e default }" containerID=3d1f9281cf7aa32a6d76cbab9c1ae79814634c1e9a102974abc93f2a763006e4 datapathConfiguration="&{false false false false false }" interface=lxc04eeb27f548b k8sPodName=kube-system/coredns-7c96b6546b-8z2kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88164ff4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identity=21693 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88164ff4a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identity=21693 ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj line=611 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88164ff4a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2407 identity=21693 ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=88164ff4a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2407 identity=21693 ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=daemon level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=9201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=9201 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d1f9281cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1172 identity=9201 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d1f9281cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1172 identity=9201 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=88164ff4a0 endpointID=2407 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-5hj2n subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=901733fe-52ea-4dc9-86c2-f8d6ae4b653e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=88164ff4a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2407 identity=21693 ipv4=10.0.0.208 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-5hj2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 983a8f9d-cb5b-4d49-8521-ce28949c62c1 default }" containerID=72b154a01ee4de9d9f08df9252dbaec2797fd801bcb836039f7a87dbe45f679b datapathConfiguration="&{false false false false false }" interface=lxc6312ecd1a760 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=45427 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1912 identity=45427 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72b154a01e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1912 identity=45427 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=72b154a01e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1912 identity=45427 ipv4=10.0.0.194 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-jccvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=605 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00605 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00605 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00605 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00605:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=605 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 2d4ef27f-e016-44ce-beae-c0bd9e27ab7d default }" containerID=7c1c94569e6f90e011ecf941a7af34cfdc8a38d9e229e6338f734db29993dbf1 datapathConfiguration="&{false false false false false }" interface=lxc4abd2757bab7 k8sPodName=kube-system/coredns-67659f764b-w65f6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c1c94569e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c1c94569e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7c1c94569e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=9201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c1c94569e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=9201 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c1c94569e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=84 identity=9201 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c1c94569e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=84 identity=9201 ipv4=10.0.0.69 ipv6= k8sPodName=kube-system/coredns-67659f764b-w65f6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 af303ceb-1b51-4834-8f47-a82b62ecdf14 default }" containerID=f2dc9ba70bef82f20723950b5f0790c75861d4cb0496eb306cf486bdb3a9f02e datapathConfiguration="&{false false false false false }" interface=lxc4b7f15f9b7a2 k8sPodName=kube-system/coredns-67659f764b-scwkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2dc9ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2dc9ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f2dc9ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=9201 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2dc9ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=9201 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2dc9ba70b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3548 identity=9201 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2dc9ba70b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3548 identity=9201 ipv4=10.0.0.95 ipv6= k8sPodName=kube-system/coredns-67659f764b-scwkn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 14dc78ac-b49e-410d-b471-948a948c1e62 default }" containerID=ed85273c23ced7b0efb6320d2ab26deb94f63757ce15a7a0aa8652e4d8b74090 datapathConfiguration="&{false false false false false }" interface=lxca7a67da70b50 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed85273c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed85273c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed85273c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identity=51579 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed85273c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1951 identity=51579 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ed85273c23 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1951 identity=51579 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed85273c23 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1951 identity=51579 ipv4=10.0.0.9 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wk7gs subsys=daemon level=info msg="Delete endpoint request" containerID=3d1f9281cf endpointID=1172 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8z2kj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=3d1f9281cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1172 identity=9201 ipv4=10.0.0.29 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8z2kj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 74f10067-5c40-4b07-810d-9776061f43dc default }" containerID=aa54ce09314092d25414bb766ecbed1649f3daa71366ff5906cf0ade4d820db8 datapathConfiguration="&{false false false false false }" interface=lxceffc8a684501 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.177 94997ac1-ad06-45c4-8ee3-3fe8b78ed799 default }" containerID=e40332e047d4395d7fb9501550a1bc1860aabaa6dd986970347554c4f37bf323 datapathConfiguration="&{false false false false false }" interface=lxcc5d0f758d202 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 389246ec-39ed-457d-893c-d56d71edaf56 default }" containerID=a407b91a617debec30da21307fb7050b7c40bbf52deddeecdde0521fe2becea6 datapathConfiguration="&{false false false false false }" interface=lxc1362fb6b2131 k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 d3d67f52-ab72-4c82-8b98-e9203fd46827 default }" containerID=abfd99d9b0352f7ce09c803a9c10d4ef07e34cc3e191494c8c3c94c40f90bd02 datapathConfiguration="&{false false false false false }" interface=lxcc2b4232ee9db k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=5623 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=5623 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=41360 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=41360 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=aa54ce0931 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=956 identity=5623 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa54ce0931 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=956 identity=5623 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-q9nft subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e40332e047 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=944 identity=41360 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e40332e047 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=944 identity=41360 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-s7cz6 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=53529 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1195 identity=53529 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=8369 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=8369 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a407b91a61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1195 identity=53529 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a407b91a61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1195 identity=53529 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bbjnc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=abfd99d9b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3871 identity=8369 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc subsys=endpoint level=info msg="Successful endpoint creation" containerID=abfd99d9b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3871 identity=8369 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-c2crc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.128 0c1d5e26-7923-4fb6-a901-d21d3c664120 default }" containerID=4d21818b7a7c50607970240cbce57a350b2e4492ae5b8a8230c4095d7e080ba4 datapathConfiguration="&{false false false false false }" interface=lxcff218e8478ab k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d21818b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d21818b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d21818b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=14635 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d21818b7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1867 identity=14635 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 fa1d45c4-89b8-49d9-8226-b7c2e74cde8b default }" containerID=a20134cbdf1d172ca3b934410ee1ac297d447be201b5449780ca5d02ac2e431e datapathConfiguration="&{false false false false false }" interface=lxca801edba4291 k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a20134cbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a20134cbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a20134cbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=2734 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a20134cbdf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3944 identity=2734 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d21818b7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1867 identity=14635 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d21818b7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1867 identity=14635 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a20134cbdf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3944 identity=2734 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=a20134cbdf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3944 identity=2734 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a20134cbdf endpointID=3944 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-q5tkq subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=a6f59604-8782-45e9-8cb8-b1da0907acbf k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a20134cbdf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3944 identity=2734 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q5tkq subsys=endpoint level=info msg="Delete endpoint request" containerID=4d21818b7a endpointID=1867 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-g2bhj subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=8965cb88-8339-4c6d-ad0a-b2ba8e43c20e k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=4d21818b7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1867 identity=14635 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-g2bhj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 ed7fc4d2-18cf-43f1-927a-110ae36c6b81 default }" containerID=77c47546b98fe3635ec857350bdc4d9098dcc6ff58e66698a6ee36f906a25731 datapathConfiguration="&{false false false false false }" interface=lxcb03052efd297 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77c47546b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77c47546b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77c47546b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=17080 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77c47546b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=17080 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77c47546b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=655 identity=17080 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=77c47546b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=655 identity=17080 ipv4=10.0.0.71 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-klmvg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 1b4c4e28-e1ca-40a6-a822-3528495be1ee default }" containerID=135142135af9e035ef34d97f492362215769df9284c75b3de8bdcc165b6e7dc0 datapathConfiguration="&{false false false false false }" interface=lxc9ef3939159b1 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=135142135a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=135142135a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b634cca0-dd21-4d19-aa88-7112677be159,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b634cca0-dd21-4d19-aa88-7112677be159,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b634cca0-dd21-4d19-aa88-7112677be159;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=b634cca0-dd21-4d19-aa88-7112677be159;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=135142135a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=46736 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b634cca0-dd21-4d19-aa88-7112677be159,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=b634cca0-dd21-4d19-aa88-7112677be159,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=135142135a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=46736 ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=135142135a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3197 identity=46736 ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=135142135a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3197 identity=46736 ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=135142135a endpointID=3197 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-sp5j2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b634cca0-dd21-4d19-aa88-7112677be159 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=b634cca0-dd21-4d19-aa88-7112677be159 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=135142135a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3197 identity=46736 ipv4=10.0.0.238 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sp5j2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 4f8298fa-5265-4627-973f-15f04d92b1ef default }" containerID=794f30c2d483df8081403720bc5a44103c77edcd2407c8c75a6853ab5860ee6a datapathConfiguration="&{false false false false false }" interface=lxc151a763c1b45 k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=794f30c2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=794f30c2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=794f30c2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=1343 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=794f30c2d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=1343 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=794f30c2d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2767 identity=1343 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=794f30c2d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2767 identity=1343 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-v57p2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=16d9622d-55fa-4d92-bbc6-0c2644a9ba20] Description:}]" policyAddRequest=82dc6fb5-f891-4f27-825a-a9074ae9bcf1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=82dc6fb5-f891-4f27-825a-a9074ae9bcf1 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=203dd4c1-db15-4e6d-b078-f38c298b7b9d] Description:}]" policyAddRequest=4f29095c-9b68-4118-b956-36b202cd75cc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4f29095c-9b68-4118-b956-36b202cd75cc policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.226 a75ae447-b864-4c71-9164-5e8b0cd3e5f6 default }" containerID=8b1d5a2b710b8f9ce384accc13c547313d8fab01954252575ced3827a84fe4a5 datapathConfiguration="&{false false false false false }" interface=lxcc92b85f1ca33 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=36049 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=36049 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b1d5a2b71 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1554 identity=36049 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b1d5a2b71 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1554 identity=36049 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9ftsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 90a90325-d080-4862-b33c-34ea7fe39d84 default }" containerID=595c726c616d59599493e0820f5ebf563fa6eeef51d8459720b032c12da12847 datapathConfiguration="&{false false false false false }" interface=lxc9307d7eb09ad k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=595c726c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=595c726c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=595c726c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=65157 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=595c726c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=65157 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=595c726c61 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=440 identity=65157 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft subsys=endpoint level=info msg="Successful endpoint creation" containerID=595c726c61 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=440 identity=65157 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-vtrft subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=555173b9-e364-4570-afef-8cec44fe9597] Description:}]" policyAddRequest=77a8ad66-810b-4f4e-b96f-175458eaebdf subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=77a8ad66-810b-4f4e-b96f-175458eaebdf policyRevision=4 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 601dc305-03f1-4501-9eb7-6df5d7dd1d1a default }" containerID=67fea7c445307a2044a20e30f7116b74fb8c5789d95d089c5dd054f2b4285b4a datapathConfiguration="&{false false false false false }" interface=lxc81b736f802d8 k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67fea7c445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67fea7c445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67fea7c445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=56321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67fea7c445 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=56321 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=67fea7c445 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1442 identity=56321 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67fea7c445 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1442 identity=56321 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 cff3f475-01e3-448e-9d80-061d82c2aa9b default }" containerID=8aba257e3648748ce34cae7e4212ab3c1abaed45415678361897c9029dcfa43b datapathConfiguration="&{false false false false false }" interface=lxc599363097ccc k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aba257e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aba257e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aba257e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18610 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aba257e36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2631 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8aba257e36 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2631 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aba257e36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2631 identity=18610 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 5ec65431-6479-4fb2-b50a-2f2deab0470c default }" containerID=fee37e7a9046efd63939537dbde4ba8408d532fcc581f3b9a83dc358a7ce4dde datapathConfiguration="&{false false false false false }" interface=lxc44962f8de39a k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fee37e7a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fee37e7a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fee37e7a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=56321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fee37e7a90 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1757 identity=56321 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fee37e7a90 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1757 identity=56321 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fee37e7a90 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1757 identity=56321 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67fea7c445 endpointID=1442 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=67fea7c445 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1442 identity=56321 ipv4=10.0.0.1 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ead7d47-7a1b-4950-96fa-a310cf72d353 subsys=endpoint level=info msg="Delete endpoint request" containerID=fee37e7a90 endpointID=1757 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fee37e7a90 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1757 identity=56321 ipv4=10.0.0.148 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ab35a515-ba07-4d0a-a12b-9415dbd7d775 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 72d7e482-98c3-44c2-8234-cf52f3c97f9d default }" containerID=127ca726280a334e8319c9fe1f37430d4aca847d0b6f96ac877d5ff190979fa3 datapathConfiguration="&{false false false false false }" interface=lxccae87a5bbed4 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=34936 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=34936 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=127ca72628 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1903 identity=34936 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=127ca72628 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1903 identity=34936 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.134 46f40c14-cd07-4869-af4d-eedb892ae46d default }" containerID=c343bb2f0f619e9eacfb82847d3ed36e6b195cf32c7dbfc5b15d081230f0ca6d datapathConfiguration="&{false false false false false }" interface=lxc004af85f32ab k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c343bb2f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c343bb2f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c343bb2f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=5466 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c343bb2f0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3091 identity=5466 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c343bb2f0f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3091 identity=5466 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c343bb2f0f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3091 identity=5466 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0016523755448419363 newInterval=7m30s subsys=map-ct level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6f70b7ed-cc02-4640-a606-7e81a7c36f48] Description:}]" policyAddRequest=6b8f2b86-5cbc-4473-8fa6-d9af79079de3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6b8f2b86-5cbc-4473-8fa6-d9af79079de3 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.27 df4afa6b-1d41-4550-b880-fd2d71a7fac5 default }" containerID=fc674e065888e228aea29a36ac5a6b65b242f4554f0600cf8ef2e83ae2765d78 datapathConfiguration="&{false false false false false }" interface=lxcbd1409c88b86 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc674e0658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc674e0658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc674e0658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identity=23629 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc674e0658 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1057 identity=23629 ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc674e0658 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1057 identity=23629 ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc674e0658 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1057 identity=23629 ipv4=10.0.0.27 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 ea0d6f11-803d-45d2-b127-82461d99a301 default }" containerID=31e7441c46735503f2c06e1c4df49cda7023b89646b84e617496aaeeaad68c5a datapathConfiguration="&{false false false false false }" interface=lxcc3091ff18ba0 k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e7441c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e7441c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e7441c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=56321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e7441c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=56321 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31e7441c46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2418 identity=56321 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e7441c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2418 identity=56321 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=daemon level=info msg="Delete endpoint request" containerID=31e7441c46 endpointID=2418 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=31e7441c46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2418 identity=56321 ipv4=10.0.0.227 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9a21286-84b4-48b6-9639-b94b9e2fc6b9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 6ee1818e-f551-463a-b860-977e226190b6 default }" containerID=c722d47bd9ad7b2212148832a5203f72b02b202e7ef8f872eca6464258f45e6f datapathConfiguration="&{false false false false false }" interface=lxc241ef036410a k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c722d47bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c722d47bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c722d47bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=39054 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c722d47bd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=226 identity=39054 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c722d47bd9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=226 identity=39054 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c722d47bd9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=226 identity=39054 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 0a6fb64f-7759-4fc1-b326-0a7b08d9b26c default }" containerID=91b06ce85e0b1a5fb37981a113339169084cb4d44100dcb9b70b8c665febcfb3 datapathConfiguration="&{false false false false false }" interface=lxcda82ff1bd06c k8sPodName=openstack/keystone-credential-setup-fkgvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91b06ce85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91b06ce85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91b06ce85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=36794 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91b06ce85e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1163 identity=36794 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91b06ce85e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1163 identity=36794 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=91b06ce85e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=36794 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91b06ce85e endpointID=1163 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fkgvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=c14b1d53-c02d-4298-ad5b-64bb2dbe1eaf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91b06ce85e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1163 identity=36794 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-fkgvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 d072c197-8cb7-450d-beb6-a73f67b43586 default }" containerID=cafa83a3667aa6627a7950e1f04765e3eefc0e76c7b4f8ce744fa607d53f628e datapathConfiguration="&{false false false false false }" interface=lxc7ae7a14565db k8sPodName=openstack/keystone-db-init-5kmrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cafa83a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cafa83a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cafa83a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=18289 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cafa83a366 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=334 identity=18289 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cafa83a366 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=334 identity=18289 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=cafa83a366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=18289 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cafa83a366 endpointID=334 k8sNamespace=openstack k8sPodName=keystone-db-init-5kmrr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=a304aa09-e444-4829-b58e-796f6e13eeac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cafa83a366 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=334 identity=18289 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-db-init-5kmrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 9266bcc4-ee76-40ba-aa64-0f7dde97dd80 default }" containerID=943a618ed42a608d6cc24439d55f3c4f0259837652f06d6b2030da9b347e2e6a datapathConfiguration="&{false false false false false }" interface=lxc3a740736cb3f k8sPodName=openstack/keystone-fernet-setup-xwxkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=943a618ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=943a618ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=943a618ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=62747 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=943a618ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=318 identity=62747 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=943a618ed4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=318 identity=62747 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=943a618ed4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=318 identity=62747 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=943a618ed4 endpointID=318 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xwxkl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=afb0f09a-50bf-4a54-ba5f-801924a4c30a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=943a618ed4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=318 identity=62747 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-fernet-setup-xwxkl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 4426faed-4faf-4a81-8e2e-f71ae5945b79 default }" containerID=2b6c316cc9d83484e1672168206896879245637aff80abe426e3f3ab907d2600 datapathConfiguration="&{false false false false false }" interface=lxc3c4ea9a11703 k8sPodName=openstack/keystone-db-sync-7czqx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b6c316cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b6c316cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b6c316cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=34733 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b6c316cc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=34733 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2b6c316cc9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=903 identity=34733 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b6c316cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=34733 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b6c316cc9 endpointID=903 k8sNamespace=openstack k8sPodName=keystone-db-sync-7czqx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=b3dadf7d-cd05-4bc6-bdff-a908f42a3e6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2b6c316cc9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=903 identity=34733 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/keystone-db-sync-7czqx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 f5ebc0d8-7b8b-4551-bc52-53ea5a3e693f default }" containerID=1e0b38cb765c4651d54767412990ffaa5656f03b4983d556b608a8e5a39b2b8f datapathConfiguration="&{false false false false false }" interface=lxc757821ce46a7 k8sPodName=openstack/keystone-rabbit-init-7ztzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e0b38cb76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e0b38cb76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=991cd184-4f89-4922-9607-5b2853f78b97,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=991cd184-4f89-4922-9607-5b2853f78b97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=991cd184-4f89-4922-9607-5b2853f78b97;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=991cd184-4f89-4922-9607-5b2853f78b97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e0b38cb76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=3737 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=991cd184-4f89-4922-9607-5b2853f78b97,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=991cd184-4f89-4922-9607-5b2853f78b97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e0b38cb76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=3737 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e0b38cb76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=3737 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e0b38cb76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=3737 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e0b38cb76 endpointID=507 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-7ztzd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=991cd184-4f89-4922-9607-5b2853f78b97 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=991cd184-4f89-4922-9607-5b2853f78b97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1e0b38cb76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=3737 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-rabbit-init-7ztzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 4e5df093-39f0-47aa-b3c1-620268e641e0 default }" containerID=ab321bc69f7ed53dafcce1588dc0a993e93c3d792f71095d8f0c6f600900f644 datapathConfiguration="&{false false false false false }" interface=lxc019debf024da k8sPodName=openstack/keystone-domain-manage-7h8z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=14911 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=14911 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab321bc69f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1228 identity=14911 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab321bc69f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=14911 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.6 ab8fbf44-17f8-499e-bda6-06f4c9836f7e default }" containerID=ab6f50efc21a547391fb888d77be8d4de69eeca8031c8422576c0ddc6b46d8ab datapathConfiguration="&{false false false false false }" interface=lxc062c0608f518 k8sPodName=openstack/keystone-api-888fb596-tr8jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=7864 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=7864 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab6f50efc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=7864 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab6f50efc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=7864 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-api-888fb596-tr8jk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab321bc69f endpointID=1228 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7h8z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=31079803-78a4-4457-a783-bd2a1d87c62a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ab321bc69f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=14911 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-domain-manage-7h8z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 b47c1b52-526e-4e6f-a512-1d88241791fc default }" containerID=ced873465dd503cb6d8ae30a23d6deaad3c2485551b52d1266cd234618ff0b0e datapathConfiguration="&{false false false false false }" interface=lxc9f0d64a3485f k8sPodName=openstack/keystone-bootstrap-4jvsn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=51888 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1913 identity=51888 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ced873465d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1913 identity=51888 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ced873465d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1913 identity=51888 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ced873465d endpointID=1913 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4jvsn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=488fd42b-d87c-4cb8-b157-e5029f0ce535 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ced873465d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1913 identity=51888 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-4jvsn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 aadc9617-b3f6-4477-85c8-6ed3847e3ce8 default }" containerID=4cb31c4a064da49ec88713723290e051cdbf266a056f22a81ac5599cdcd638e9 datapathConfiguration="&{false false false false false }" interface=lxc14ebab33cbd4 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cb31c4a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cb31c4a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cb31c4a06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2488 identity=60888 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4cb31c4a06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2488 identity=60888 ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cb31c4a06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2488 identity=60888 ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cb31c4a06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2488 identity=60888 ipv4=10.0.0.241 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-z2ftl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 e3d4ad00-d381-4a41-a00f-b40c5a3dd513 default }" containerID=a2ddb61ed28de16350d105966a0c88e768d6a2ceaecfe38595d91d0afe2bff86 datapathConfiguration="&{false false false false false }" interface=lxcc97f9d2fa302 k8sPodName=openstack/horizon-7c5f45c4-b2lbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=4389 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=4389 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 e55f3c95-3dea-40ad-b29e-edf2de5b171a default }" containerID=7120d42973fc21169a157c14063372aaa867b69072613b4787c9eb3ea3c39ac0 datapathConfiguration="&{false false false false false }" interface=lxc1de459142b5e k8sPodName=openstack/horizon-db-init-m6q79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7120d42973 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7120d42973 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f0e35282-1f94-40eb-90ba-09652304a860,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=f0e35282-1f94-40eb-90ba-09652304a860,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=f0e35282-1f94-40eb-90ba-09652304a860;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=f0e35282-1f94-40eb-90ba-09652304a860;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7120d42973 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=41850 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f0e35282-1f94-40eb-90ba-09652304a860,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=f0e35282-1f94-40eb-90ba-09652304a860,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7120d42973 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=41850 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2ddb61ed2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=583 identity=4389 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2ddb61ed2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=583 identity=4389 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/horizon-7c5f45c4-b2lbd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 e210b9af-c570-42ad-86e0-03ec841014e7 default }" containerID=f1e57caad1b0232284e4adaed02c89a3cc9efa9470c2a8cbd22cf0f2e35920c2 datapathConfiguration="&{false false false false false }" interface=lxc718d4d4aecdc k8sPodName=openstack/horizon-7c5f45c4-9tjvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1e57caad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1e57caad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f1e57caad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=4389 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1e57caad1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2341 identity=4389 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 19ed074d-0084-4bfe-a4d0-63a733da6fd5 default }" containerID=39b1bb458009a73f0c58b0a18fa81da178beaa5ba45f0f7d9bd927ad3551abcd datapathConfiguration="&{false false false false false }" interface=lxca6e1109e488f k8sPodName=openstack/horizon-7c5f45c4-vd8ps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39b1bb4580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39b1bb4580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps subsys=endpoint level=info msg="Identity of endpoint changed" containerID=39b1bb4580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identity=4389 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39b1bb4580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identity=4389 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7120d42973 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=116 identity=41850 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7120d42973 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=41850 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f1e57caad1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2341 identity=4389 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1e57caad1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2341 identity=4389 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/horizon-7c5f45c4-9tjvl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39b1bb4580 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3327 identity=4389 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps subsys=endpoint level=info msg="Successful endpoint creation" containerID=39b1bb4580 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3327 identity=4389 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/horizon-7c5f45c4-vd8ps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7120d42973 endpointID=116 k8sNamespace=openstack k8sPodName=horizon-db-init-m6q79 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=f0e35282-1f94-40eb-90ba-09652304a860 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=f0e35282-1f94-40eb-90ba-09652304a860 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=7120d42973 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=116 identity=41850 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/horizon-db-init-m6q79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 b9db04a4-826a-4d58-bba5-70d1f9967d19 default }" containerID=586ac0f82d9b1abdb80fd1b66f8101673bee71a8cad9daba61284f66f85ff263 datapathConfiguration="&{false false false false false }" interface=lxcb9f39b6cf2b2 k8sPodName=openstack/horizon-db-sync-v57q6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=1018 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=185 identity=1018 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=586ac0f82d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=185 identity=1018 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=586ac0f82d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=1018 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=586ac0f82d endpointID=185 k8sNamespace=openstack k8sPodName=horizon-db-sync-v57q6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=f4067d13-649d-4a6e-8c79-4c89286f4f55 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=586ac0f82d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=185 identity=1018 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/horizon-db-sync-v57q6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 f35f6bca-4b85-44e8-9457-b34788f9eed6 default }" containerID=e67a583592ed9013e32e5f4dead5e72db071d3ab977272808efc319233cbb326 datapathConfiguration="&{false false false false false }" interface=lxc5df85c458036 k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e67a583592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e67a583592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e67a583592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=3994 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e67a583592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=3994 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e67a583592 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3213 identity=3994 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=e67a583592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3213 identity=3994 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e67a583592 endpointID=3213 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-29k5s subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c32dbccb-d991-4a36-91b3-771ca4aa5849 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e67a583592 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3213 identity=3994 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-29k5s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 6a302fe9-4fe9-4753-9f7d-3006b0f5464e default }" containerID=04dea292d01476f31e2bb933de5180579ea069b157466cc57ca431bc6cb9a778 datapathConfiguration="&{false false false false false }" interface=lxc2d5dd0b0b38e k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identity=9410 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2293 identity=9410 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 59a1dae9-3e2c-4bb6-9d01-ad46343d596e default }" containerID=5812dcbcc5ecfdd772aa8fc3d5311122ef1297b42e3c41c42cf030607b39db2b datapathConfiguration="&{false false false false false }" interface=lxc8aa4d460a3d4 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5812dcbcc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2949 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 7fca95ab-c47b-498e-90f1-4b218a64ef6a default }" containerID=9b6ce09790cf8e308db8c55fa7b929040962bdf7a7c21522234fa9afd46864b4 datapathConfiguration="&{false false false false false }" interface=lxc59f16e337611 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b6ce09790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b6ce09790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5812dcbcc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2949 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b6ce09790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=18275 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b6ce09790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=930 identity=18275 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5812dcbcc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2949 identity=6189 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5812dcbcc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2949 identity=6189 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04dea292d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2293 identity=9410 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=04dea292d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2293 identity=9410 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-655697d5f6-p2jtv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9b6ce09790 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=930 identity=18275 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b6ce09790 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=930 identity=18275 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-dn7mt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5812dcbcc5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2949 identity=6189 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5812dcbcc5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2949 identity=6189 ipv4=10.0.0.15 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-lf4fp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 7416ecaa-7145-41d3-8508-03eccca4bfe2 default }" containerID=682f4cdbaae6a0adcc50dbd2f620fd6798aaac40d17dc5b429553a7400dbf4ca datapathConfiguration="&{false false false false false }" interface=lxcdd58a0f6e2f8 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=682f4cdbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=682f4cdbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=682f4cdbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2198 identity=4811 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=682f4cdbaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=4811 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=682f4cdbaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2198 identity=4811 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=endpoint level=info msg="Successful endpoint creation" containerID=682f4cdbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=4811 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=682f4cdbaa endpointID=2198 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-ksgrv subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ae0c0374-822d-4fc3-ad00-4c51d42fbcc2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=682f4cdbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2198 identity=4811 ipv4=10.0.0.32 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-ksgrv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 6c72d023-35ee-4ae4-a8e1-fb34c93ff48d default }" containerID=69becbbe5bc58e5e127da61940db5d1de11fcf1412cdeb91c7be5bfb435d1baf datapathConfiguration="&{false false false false false }" interface=lxc58d66426bf77 k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69becbbe5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69becbbe5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69becbbe5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3906 identity=56321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69becbbe5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3906 identity=56321 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69becbbe5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3906 identity=56321 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69becbbe5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=56321 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 7e4f2791-8be3-46ba-8319-743bbb03f2ed default }" containerID=d0e9dffab072304cd2091c2eabc1c484bf17719026373fefdaa0aa70bafd7c11 datapathConfiguration="&{false false false false false }" interface=lxc0b8670646a8f k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0e9dffab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0e9dffab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d0e9dffab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=56321 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0e9dffab0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1772 identity=56321 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0e9dffab0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1772 identity=56321 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0e9dffab0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=56321 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=daemon level=info msg="Delete endpoint request" containerID=69becbbe5b endpointID=3906 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=d0e9dffab0 endpointID=1772 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=69becbbe5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3906 identity=56321 ipv4=10.0.0.7 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8401458d-62a3-4093-98ec-3fd76279ccd4 subsys=endpoint level=info msg="Removed endpoint" containerID=d0e9dffab0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1772 identity=56321 ipv4=10.0.0.239 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ebe376-ec74-4fd9-8f7b-db2e2b80877e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 aa17b9ce-a0ca-45b7-b78d-4ac7d2ee806d default }" containerID=a0c74b1ba79139bb2f3d85198c549cb32c40b26e440608a71d5c640f0e3428fa datapathConfiguration="&{false false false false false }" interface=lxce7da82055c11 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0c74b1ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0c74b1ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0c74b1ba7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2418 identity=7738 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a0c74b1ba7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2418 identity=7738 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0c74b1ba7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2418 identity=7738 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0c74b1ba7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2418 identity=7738 ipv4=10.0.0.135 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 b1403122-0eb8-414b-babd-9dd76fea5e3e default }" containerID=e03f90f8ddc12b4d052bad1f617d4683e9a03042d17b7b8b642002e58cffea7b datapathConfiguration="&{false false false false false }" interface=lxc75e1e2054052 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e03f90f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e03f90f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e03f90f8dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=422 identity=26331 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e03f90f8dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=422 identity=26331 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e03f90f8dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=422 identity=26331 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e03f90f8dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=422 identity=26331 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager