level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="861.109µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="41.521µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="795.748µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.68µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.105345ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.37µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="20.63µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="68.532µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="73.952µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="127.743µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="585.253µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.53µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=18.443874ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.373365ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.881µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.21µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="199.574µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.552µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="88.532µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.698494ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="96.032µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="8.631µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.223.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.28174ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=103.042733ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.990387ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="39.601µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.171µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="77.772µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="396.939µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.76µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="279.608µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="934.231µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.205356ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.13µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="18.34µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.223 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.223 ipAddr.ipv6="" k8sNodeIP=199.204.45.223 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.223" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.207" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.223" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.223} {CiliumInternalIP 10.0.0.207}] 10.0.0.0/24 [] [] 10.0.0.143 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:45461" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.614291068s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="18.87µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.83µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="62.561µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1612 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.602544937s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=287.557122ms file-path=/var/run/cilium/state/templates/07a88a6361a76440e1821bc76d8971b27418e4ff2254a6af871ed82a33312ca5/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 ipv4=10.0.0.143 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identityLabels="reserved:health" ipv4=10.0.0.143 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=4 identityLabels="reserved:health" ipv4=10.0.0.143 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.082424032s file-path=/var/run/cilium/state/templates/2667ea00419ff72c597cae18de961533f76aa0fff8678ed74296d377fd8a709c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3684 identity=4 ipv4=10.0.0.143 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 587e2a2c-167d-420e-ae25-31bedcbb4272 default }" containerID=85cccc3761ecf5a68bd2934b5334da0ef8d476465791e074a9186b3f2e6884f3 datapathConfiguration="&{false false false false false }" interface=lxcc26fa6e04047 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85cccc3761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85cccc3761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.94 9804fce5-5aed-4b7b-acab-7a71cf339788 default }" containerID=91cbe1568f8ef21febfe649a2ad7f56974fa2fa129a32cde70a4918baacdeded datapathConfiguration="&{false false false false false }" interface=lxcc12086f90416 k8sPodName=kube-system/coredns-7c96b6546b-rrbgr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85cccc3761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=30574 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85cccc3761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2768 identity=30574 ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=34914 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=34914 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85cccc3761 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2768 identity=30574 ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=85cccc3761 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2768 identity=30574 ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91cbe1568f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=43 identity=34914 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=endpoint level=info msg="Successful endpoint creation" containerID=91cbe1568f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=43 identity=34914 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=85cccc3761 endpointID=2768 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-p4bnd subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a9af91f9-22f0-4bc7-bc86-5cc66ddacdca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=85cccc3761 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2768 identity=30574 ipv4=10.0.0.156 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-p4bnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 f51839a6-d197-4c8a-8f00-96e4da4c042b default }" containerID=299e4559d7e0ab3c946b9adeba4627090fea430fe37ee3f13e9f6268d63648e7 datapathConfiguration="&{false false false false false }" interface=lxc82f5cd2d7f89 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=45380 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=45380 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=299e4559d7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3014 identity=45380 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz subsys=endpoint level=info msg="Successful endpoint creation" containerID=299e4559d7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3014 identity=45380 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-tf4wz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1612 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01612 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01612 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01612 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01612:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 1f4d6725-d816-4f14-b3dc-5b3908572728 default }" containerID=0f7687a52e775087ced79400ab4f8836a24028bba23e65dbcc404ea1450351b7 datapathConfiguration="&{false false false false false }" interface=lxc8470e536f560 k8sPodName=kube-system/coredns-67659f764b-w6cb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f7687a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f7687a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0f7687a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=34914 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f7687a52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3222 identity=34914 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f7687a52e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3222 identity=34914 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f7687a52e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3222 identity=34914 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-67659f764b-w6cb4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.31 29283546-ba11-4976-8135-700ea98749d7 default }" containerID=ae602f6536f0139380ffc7af9ebc7ac70aa66512347d8f595b80dea69290c8c7 datapathConfiguration="&{false false false false false }" interface=lxce631b3024d22 k8sPodName=kube-system/coredns-67659f764b-vb2rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae602f6536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae602f6536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ae602f6536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identity=34914 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae602f6536 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2379 identity=34914 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae602f6536 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2379 identity=34914 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae602f6536 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2379 identity=34914 ipv4=10.0.0.31 ipv6= k8sPodName=kube-system/coredns-67659f764b-vb2rf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.32 d6b90cf0-fb4a-4331-b9ec-6c2f14651d9c default }" containerID=53595712323eada00fa9cbaa53e3533b63beea43d7bd898e5aec2a8f2e571fbe datapathConfiguration="&{false false false false false }" interface=lxc0e7ff296de9a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=64445 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1845 identity=64445 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5359571232 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1845 identity=64445 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5359571232 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1845 identity=64445 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-pjhxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91cbe1568f endpointID=43 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rrbgr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=91cbe1568f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=43 identity=34914 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rrbgr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 ee6adab6-eb9a-46bd-9166-030cf987cc60 default }" containerID=fc5b855c5c050f4c0b34637902c2bf440bd4a060b73cabbfe9050101dbd53517 datapathConfiguration="&{false false false false false }" interface=lxcb9f0928a8581 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 ad798319-436b-4f80-889c-ff9bd6e4240a default }" containerID=a8fd9463d384cb26bfb03ab35d6d73f3b875aee8108f76aeb3a9f40eba7a4fca datapathConfiguration="&{false false false false false }" interface=lxcfc148939a24f k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=61554 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=61554 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt subsys=endpoint level=info msg="Invalid state transition skipped" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=36557 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3134 identity=36557 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 1d9b3dcd-efe1-47a7-b678-51a27de3513a default }" containerID=1d3ab389b94e846670c13687253856bb0df379c41f0fd78f5777037f33a52052 datapathConfiguration="&{false false false false false }" interface=lxc695205e27832 k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d3ab389b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d3ab389b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d3ab389b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=26596 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d3ab389b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3159 identity=26596 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc5b855c5c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3134 identity=36557 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc5b855c5c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3134 identity=36557 ipv4=10.0.0.16 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-z42tb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8fd9463d3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=61554 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8fd9463d3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=61554 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5x7kt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d3ab389b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3159 identity=26596 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d3ab389b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3159 identity=26596 ipv4=10.0.0.155 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lhlrl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 ea34bc7b-49a9-4b01-ae6b-b9179f84a8c1 default }" containerID=2e8fb84262f48287c6253df90149f7ef55480705e4ddbc479332d89823a77533 datapathConfiguration="&{false false false false false }" interface=lxc4caf8906cdf2 k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e8fb84262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e8fb84262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e8fb84262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=32141 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e8fb84262 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=32141 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e8fb84262 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=518 identity=32141 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e8fb84262 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=518 identity=32141 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2e8fb84262 endpointID=518 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-v44kg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f564fd3d-ad1e-478e-9b50-8c951de48736 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=2e8fb84262 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=518 identity=32141 ipv4=10.0.0.33 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-v44kg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 b1d4351e-927a-4bff-8e1e-7c5523ff9743 default }" containerID=4d79a01c2cf5dd34d50c91a22cfbd3ed8dc7df95b8a8d51c51a3b5bb2a53a955 datapathConfiguration="&{false false false false false }" interface=lxc89604c892804 k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=7984 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=7984 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d79a01c2c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1021 identity=7984 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d79a01c2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1021 identity=7984 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d79a01c2c endpointID=1021 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xphv9 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bf9e7d41-3ca6-474a-b448-6c05b57874e0 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=4d79a01c2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1021 identity=7984 ipv4=10.0.0.106 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xphv9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 b9fb1b44-678f-482c-88a5-7b842769fb00 default }" containerID=395822c6782a076caca7fe08db9e7e39306622f4f7e91c5161c21130df06b246 datapathConfiguration="&{false false false false false }" interface=lxc5f456c874fb3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=395822c678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=395822c678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=395822c678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=3998 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=395822c678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=786 identity=3998 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=395822c678 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=786 identity=3998 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=395822c678 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=786 identity=3998 ipv4=10.0.0.164 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-4mr65 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 cc997411-debb-4fc3-95de-05ba18f14326 default }" containerID=4d8594d70fe51ac4b17fa7a234fa3db85883ed8fa4a70cb696e1048521e99842 datapathConfiguration="&{false false false false false }" interface=lxc3b5f2e276a14 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8594d70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8594d70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4d8594d70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=58509 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8594d70f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=58509 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d8594d70f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=45 identity=58509 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8594d70f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=45 identity=58509 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=daemon level=info msg="Delete endpoint request" containerID=4d8594d70f endpointID=45 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-n9dx4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3486d255-c4c4-4db8-9f37-d29414247cb7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=4d8594d70f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=45 identity=58509 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-n9dx4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=102332e4-3324-4ff5-9c03-502821880e74] Description:}]" policyAddRequest=427a40cc-752a-4d6f-82fe-b0622cd64995 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=427a40cc-752a-4d6f-82fe-b0622cd64995 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5d70ebda-e021-4adc-abe4-aab6e9401c7a] Description:}]" policyAddRequest=056bd9b4-5ef3-4620-aacb-d13396234065 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=056bd9b4-5ef3-4620-aacb-d13396234065 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.204 3e1ba5de-3872-4796-a51c-adc6fdac128c default }" containerID=175b05c056c286f7596f6ea2f065b4ff2478248fc5caee30e08ecceaec626ed6 datapathConfiguration="&{false false false false false }" interface=lxc93dba1a12bb1 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=175b05c056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=175b05c056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=175b05c056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=53801 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=175b05c056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3220 identity=53801 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=175b05c056 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3220 identity=53801 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=175b05c056 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3220 identity=53801 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-p4t4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 3c77b8b2-5624-4549-afb0-7cbc781752d0 default }" containerID=ef81a1ed0c346fa005a4f2fd2ef5f9fd40fa96cb872b07e1f60f56012bfe3ab6 datapathConfiguration="&{false false false false false }" interface=lxca0a151c89a87 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef81a1ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef81a1ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef81a1ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=5500 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef81a1ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=5500 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef81a1ed0c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=286 identity=5500 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef81a1ed0c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=286 identity=5500 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-j9l7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 10740a6c-ad76-4f14-bd1b-9330e6fb7799 default }" containerID=cd3c7a7bd633f80dc43fec2050540d4f01b7ab933ce2e284f0fb9a59d95a368f datapathConfiguration="&{false false false false false }" interface=lxcd9595dbac95b k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd3c7a7bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd3c7a7bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd3c7a7bd6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=128 identity=5836 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cd3c7a7bd6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=128 identity=5836 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd3c7a7bd6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=128 identity=5836 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd3c7a7bd6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=128 identity=5836 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mndbh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 b79592c6-04ba-4c86-808e-94cc75a63d81 default }" containerID=d48f44bda2a666c57243e476b3323aab7cd91c992553193b79463a5ddf1ff040 datapathConfiguration="&{false false false false false }" interface=lxcd2bbd62db35b k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48f44bda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48f44bda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48f44bda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=5845 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48f44bda2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=5845 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48f44bda2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1866 identity=5845 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48f44bda2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1866 identity=5845 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 86ddd53f-3cb3-4e98-85cf-273573c5a359 default }" containerID=e8fdb4e7a38c91eec95736b4f5cbccd32f5317f0bfa1f181db84e4648f0acf3a datapathConfiguration="&{false false false false false }" interface=lxc5612ab7777c3 k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8fdb4e7a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8fdb4e7a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8fdb4e7a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8fdb4e7a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1224 identity=29312 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8fdb4e7a3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1224 identity=29312 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8fdb4e7a3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1224 identity=29312 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8fdb4e7a3 endpointID=1224 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e8fdb4e7a3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1224 identity=29312 ipv4=10.0.0.160 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2cb21fb4-2480-46a3-9435-0599ea0baff0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 ef8e938f-42b0-4308-870e-2025e9114ba4 default }" containerID=4c771e5c07a3934d2890f95a23e53eda1ed97c433573c9afed01e816a0bcbd0d datapathConfiguration="&{false false false false false }" interface=lxc9a73cd5ef320 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c771e5c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c771e5c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4c771e5c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=6761 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c771e5c07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=6761 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c771e5c07 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2885 identity=6761 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c771e5c07 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2885 identity=6761 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=25aa287c-06ab-48ce-aaea-0ecf5fefcf4b] Description:}]" policyAddRequest=e7e56b9e-acb2-4629-a0e0-b5d56018e546 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e7e56b9e-acb2-4629-a0e0-b5d56018e546 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.17 ac130bb1-0364-487a-93e2-b9ada208e73f default }" containerID=558d68b6912f5aa7a089c09e2c814e32bc93bf673ee9496b3da52e2fb28c3a17 datapathConfiguration="&{false false false false false }" interface=lxceb9a6838cb43 k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=558d68b691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=558d68b691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=558d68b691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=558d68b691 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=29312 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=558d68b691 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=600 identity=29312 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=558d68b691 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=600 identity=29312 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=daemon level=info msg="Delete endpoint request" containerID=558d68b691 endpointID=600 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=558d68b691 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=600 identity=29312 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3027fd07-5237-44bb-99bf-ef2b3e5ce5eb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 8faf2c35-f72a-47a7-aaaa-3ba8097d4dd5 default }" containerID=c5032c9741749235a4b2965e429e605aceac3942ec48c20b1f3c346f75b90265 datapathConfiguration="&{false false false false false }" interface=lxc605ddf4d144c k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5032c9741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5032c9741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c5032c9741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=17235 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5032c9741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=17235 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c5032c9741 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=504 identity=17235 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5032c9741 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=504 identity=17235 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=329a2b59-cd31-430a-ab63-dbb36bb2487a] Description:}]" policyAddRequest=5e852a00-c77a-4d4f-8802-7be8187ba4dc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5e852a00-c77a-4d4f-8802-7be8187ba4dc policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.222 565e2156-76ba-4785-aab5-44e83b444d5d default }" containerID=ce27ac160fe16037297592f9e75719869c6efa41599d9f04c12819b1d6e7bb34 datapathConfiguration="&{false false false false false }" interface=lxc443c979dc8b1 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce27ac160f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce27ac160f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce27ac160f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=3672 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ce27ac160f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=3672 ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce27ac160f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=3672 ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce27ac160f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=3672 ipv4=10.0.0.222 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.004179798990896425 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.209 c4d3e578-f60e-4002-a257-bdd399a5c660 default }" containerID=2e825805b8d68b30114320b4c8382f7c2e0147be6c395f7e7b6f84a0cf998fde datapathConfiguration="&{false false false false false }" interface=lxcc11a68541859 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e825805b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e825805b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.17 978514fe-2fd6-4eda-bbba-4d65967e6623 default }" containerID=d49ba2a0994dd2d651727bdc190c9252af6a40eb145bbe2a91c939a1fefa1083 datapathConfiguration="&{false false false false false }" interface=lxc613d8f0ba3f7 k8sPodName=monitoring/node-feature-discovery-worker-q2z2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e825805b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=25101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e825805b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1532 identity=25101 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=5070 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=310 identity=5070 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 b462a540-628d-4b07-9129-b0e04e7aaf6f default }" containerID=fc35b1e7be12fbc6723f205800fd58264dc329dc0eab0df4662d1847126d1f07 datapathConfiguration="&{false false false false false }" interface=lxcbbf6a75b3771 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc35b1e7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc35b1e7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc35b1e7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=5680 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc35b1e7be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=767 identity=5680 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2e825805b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1532 identity=25101 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e825805b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1532 identity=25101 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-r8f78 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d49ba2a099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=310 identity=5070 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d49ba2a099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=310 identity=5070 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q2z2r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc35b1e7be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=767 identity=5680 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc35b1e7be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=767 identity=5680 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-22bdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.100 ad16d561-b86d-49a5-b554-c0af32b8f7a1 default }" containerID=314a4083c941a90e488b0d662a0969242e3526d77185e30a6c51937d957603d2 datapathConfiguration="&{false false false false false }" interface=lxc394824080a6e k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=314a4083c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=314a4083c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=314a4083c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=3734 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=314a4083c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=72 identity=3734 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=314a4083c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=72 identity=3734 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=314a4083c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=72 identity=3734 ipv4=10.0.0.100 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-cjs6w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1612 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01612 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01612 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01612 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01612:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1612 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 ac2bf981-bf38-4598-9d56-6b3507208764 default }" containerID=4f1b349e603c2dfb070c957894c318b627acf1e4c131bfc2a1440bc958fe89df datapathConfiguration="&{false false false false false }" interface=lxcb929494f7636 k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=32112 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2220 identity=32112 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f1b349e60 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2220 identity=32112 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f1b349e60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2220 identity=32112 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f1b349e60 endpointID=2220 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-tmfwb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e572301d-cd0d-422d-b5ff-04e9edf18a4f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4f1b349e60 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2220 identity=32112 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tmfwb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 0669fd33-373e-40e6-81fa-5323a4ae78ed default }" containerID=405692aa802c33fa3e8c183d3dd2b4177a3a6bfddeebe93b9c178383382c0d0e datapathConfiguration="&{false false false false false }" interface=lxcdfed6c918d57 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=405692aa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=405692aa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=405692aa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=51973 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=405692aa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=51973 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 f74e75e3-2b84-4c7b-b7bb-f8457e733bab default }" containerID=aac115aa46556b4914fc1ee1887649452edb5ac61e3cd797544265c0dc5227af datapathConfiguration="&{false false false false false }" interface=lxc27e6a87b0406 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.110 80c0178b-1712-4c74-9b65-a418fe172c19 default }" containerID=5b0f253605db113985e0167c520adf41d9c637fa2a1501ec0dbea37c8fb70983 datapathConfiguration="&{false false false false false }" interface=lxc63c434bf5c18 k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aac115aa46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 subsys=endpoint level=info msg="New endpoint" containerID=5b0f253605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b0f253605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aac115aa46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b0f253605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=57026 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b0f253605 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=57026 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aac115aa46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identity=9820 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aac115aa46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3605 identity=9820 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=405692aa80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1087 identity=51973 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n subsys=endpoint level=info msg="Successful endpoint creation" containerID=405692aa80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1087 identity=51973 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-29m8n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5b0f253605 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=57026 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b0f253605 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=57026 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7dc9d78886-lb2zm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aac115aa46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3605 identity=9820 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aac115aa46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3605 identity=9820 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9mxs4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 e7e7041c-bb29-4f77-b2a6-602459274ae3 default }" containerID=9812d8fd39dac6a480006e9fc2fed17564c8d1e119aa68c0eed95eaad46aff00 datapathConfiguration="&{false false false false false }" interface=lxc300055393c33 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9812d8fd39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9812d8fd39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9812d8fd39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=707 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9812d8fd39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1135 identity=707 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9812d8fd39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1135 identity=707 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9812d8fd39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=707 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 3002dbf5-ee8c-4fc8-8811-e9eb6647c5f9 default }" containerID=40a3c2abbf6075216b868edcbf2f6a5976ac3a1f4c48eadce43149296e098f0d datapathConfiguration="&{false false false false false }" interface=lxc9913139b6ee2 k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40a3c2abbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40a3c2abbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40a3c2abbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40a3c2abbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=42 identity=29312 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40a3c2abbf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=42 identity=29312 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40a3c2abbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=29312 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 fb6ec750-f58c-4218-a40d-aa2a5890df80 default }" containerID=6869e52cf1982234df84239e60197b05922ded5aafa501179a8d8f0208f31999 datapathConfiguration="&{false false false false false }" interface=lxc386b288018f9 k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6869e52cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6869e52cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6869e52cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6869e52cf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=29312 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6869e52cf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1850 identity=29312 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6869e52cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1850 identity=29312 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=daemon level=info msg="Delete endpoint request" containerID=9812d8fd39 endpointID=1135 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bbvgk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3bdcabd7-aa4e-48a3-b0cf-709cf8b91e4b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9812d8fd39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1135 identity=707 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bbvgk subsys=endpoint level=info msg="Delete endpoint request" containerID=6869e52cf1 endpointID=1850 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=40a3c2abbf endpointID=42 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6869e52cf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1850 identity=29312 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d5faf1e0-a671-4951-a52c-e85449139ed0 subsys=endpoint level=info msg="Removed endpoint" containerID=40a3c2abbf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=42 identity=29312 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6596c844-7218-49c9-a25e-548cb75340d7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 e7a2f94f-60ba-406a-bcca-9ebde7c06ac8 default }" containerID=985f5078cb04fbb110e54d3b8cd4e8a29f3eee46883b263fff14f3c15c085cbf datapathConfiguration="&{false false false false false }" interface=lxc257cca8055b2 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=985f5078cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=985f5078cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=985f5078cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identity=54192 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=985f5078cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3817 identity=54192 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=985f5078cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3817 identity=54192 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=985f5078cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3817 identity=54192 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 74394049-60d4-409e-968e-c85a04e92da2 default }" containerID=0608d00df2877ad5ec88eb2e981a245e0ee3ab9dfba571517777f5008f2a59a2 datapathConfiguration="&{false false false false false }" interface=lxc1fdbecac7a7f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0608d00df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0608d00df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0608d00df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=27949 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0608d00df2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3341 identity=27949 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0608d00df2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3341 identity=27949 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0608d00df2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3341 identity=27949 ipv4=10.0.0.231 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 305288de-1ab1-4d74-8e35-9a29fd1e769c default }" containerID=9864f7a4ad903f1f6962438e64f51d7e133e7c6798d8536bd19f483c3d1d9d27 datapathConfiguration="&{false false false false false }" interface=lxc3dde3d388638 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=17032 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3977 identity=17032 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 dc5d4ae8-1f97-4658-9b4d-0a194a2d3382 default }" containerID=375fcd5c4d6ad803ca73f5ae09aba13e23d64c8b2a8b28a3d8405a64e0bb3806 datapathConfiguration="&{false false false false false }" interface=lxce0337688edcf k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=375fcd5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=375fcd5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=375fcd5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identity=19879 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=375fcd5c4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1884 identity=19879 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 7d9adc0e-70b1-4e86-91de-a1a3ffd44639 default }" containerID=f83f3fd2f6a627d702dd679cd85c04a8d5fede0d01f66edf5b9b2d8476b9e3bf datapathConfiguration="&{false false false false false }" interface=lxc4b682719fc73 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f83f3fd2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f83f3fd2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f83f3fd2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=2083 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f83f3fd2f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=2083 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9864f7a4ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3977 identity=17032 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9864f7a4ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3977 identity=17032 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=375fcd5c4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1884 identity=19879 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l subsys=endpoint level=info msg="Successful endpoint creation" containerID=375fcd5c4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1884 identity=19879 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-cg42l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f83f3fd2f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=2083 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f83f3fd2f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=2083 ipv4=10.0.0.106 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.138 5dcf2717-787f-4570-8afd-4294c7aa106e default }" containerID=0d17ca9c4e4a0a454ac7a5686816174d6d0593f53d30041eee8f8fbdcbc04323 datapathConfiguration="&{false false false false false }" interface=lxcd6ac273c2de6 k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d17ca9c4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d17ca9c4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d17ca9c4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d17ca9c4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=29312 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d17ca9c4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=639 identity=29312 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d17ca9c4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=29312 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.202 b93df2ed-11a1-4804-900f-cf67f89951e8 default }" containerID=2bc7c872dbf0710010f166714237cea91ba04b757cd4886e030d7b1d6361db60 datapathConfiguration="&{false false false false false }" interface=lxc5c59dc02d358 k8sPodName=monitoring/vector-v7jtq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=11293 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1767 identity=11293 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bc7c872db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1767 identity=11293 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bc7c872db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1767 identity=11293 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/vector-v7jtq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d17ca9c4e endpointID=639 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d17ca9c4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=29312 ipv4=10.0.0.138 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-52566a44-5c63-4b86-8005-7234159cdc8e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 73c2c405-4b40-467a-b710-b5b34233396d default }" containerID=049380f80b4712f2f4f657bc4e566050853b2c12b159717c5bb8a750a0197a40 datapathConfiguration="&{false false false false false }" interface=lxcbae2e5e3d385 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=049380f80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=049380f80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=049380f80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=63885 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=049380f80b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=63885 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=049380f80b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=403 identity=63885 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=049380f80b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=63885 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.252 bd428095-44dd-40d5-854f-17b2c31f160f default }" containerID=fcfdf80ec16fb7c9ca2321eced797cd116c07c8a2f3bf70152e963df4a743300 datapathConfiguration="&{false false false false false }" interface=lxc52202de38ca2 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcfdf80ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcfdf80ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcfdf80ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=56981 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcfdf80ec1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=56981 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcfdf80ec1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1008 identity=56981 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcfdf80ec1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1008 identity=56981 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-8fk96 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 fe46c1c1-15aa-481c-9807-031796f41c67 default }" containerID=fb7b83a9af1120ded0efc295ac376c673cacf5ba9e63ed2a48fcc98b7a7a6a62 datapathConfiguration="&{false false false false false }" interface=lxcb3a0a8e39ae5 k8sPodName=openstack/memcached-memcached-6479589586-v5575 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=15183 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4084 identity=15183 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb7b83a9af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4084 identity=15183 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb7b83a9af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4084 identity=15183 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-v5575 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 3f599c6c-c3ca-4c61-958c-6cefb63178fc default }" containerID=d12bf4e0d341c8e0052db7b96bf4564f3892955ced23234e77d05ee82bca7680 datapathConfiguration="&{false false false false false }" interface=lxc211034208111 k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d12bf4e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d12bf4e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d12bf4e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d12bf4e0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=29312 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d12bf4e0d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=316 identity=29312 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d12bf4e0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=29312 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=daemon level=info msg="Delete endpoint request" containerID=d12bf4e0d3 endpointID=316 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d12bf4e0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=316 identity=29312 ipv4=10.0.0.96 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1fa1d093-432c-4bbc-bece-d01d5909fd15 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 ab267227-f146-40bd-882f-e34649d5074b default }" containerID=37131f5a7cfb40a1bf2d91ca5a8d75b701f458eda4011bd379b4cd0213775d38 datapathConfiguration="&{false false false false false }" interface=lxc7ba0762d359b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=47890 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2350 identity=47890 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37131f5a7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2350 identity=47890 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37131f5a7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2350 identity=47890 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 0d7cdb82-7a53-4e02-832d-d92e4704f21a default }" containerID=8efed9215184dbe703f1941133b052528e5e725623daaf58ff23024fb7f52eb1 datapathConfiguration="&{false false false false false }" interface=lxc960a542fcdd8 k8sPodName=openstack/keystone-credential-setup-xlq62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=11476 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3831 identity=11476 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 04805de9-7b33-45f0-839f-5c19f1bdaa5c default }" containerID=1530b43f12635a73d49cee805e6f49539be19f99fd28977225c8b6b4c1392d29 datapathConfiguration="&{false false false false false }" interface=lxcf49f5be88fd9 k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1530b43f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1530b43f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1530b43f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=4350 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1530b43f12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=4350 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8efed92151 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3831 identity=11476 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8efed92151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3831 identity=11476 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1530b43f12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2380 identity=4350 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1530b43f12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2380 identity=4350 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-api-65f994f5bc-q7wpc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8efed92151 endpointID=3831 k8sNamespace=openstack k8sPodName=keystone-credential-setup-xlq62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=891f435c-da6b-430a-95e1-b5bcb11da30a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8efed92151 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3831 identity=11476 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/keystone-credential-setup-xlq62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 7a392a75-e79c-45ec-8c98-338611769390 default }" containerID=1291b1194596458880b507de9a7aab33ae17b1100e35d5f99e6fd79dc4f7b23f datapathConfiguration="&{false false false false false }" interface=lxcbab45d3d11e7 k8sPodName=openstack/keystone-db-init-fj4hm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=57412 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=57412 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1291b11945 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2720 identity=57412 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1291b11945 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2720 identity=57412 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1291b11945 endpointID=2720 k8sNamespace=openstack k8sPodName=keystone-db-init-fj4hm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b94e4640-62dc-46c0-b744-f153eb4a7e43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1291b11945 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2720 identity=57412 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-db-init-fj4hm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 014d53a1-2b07-4ced-9452-030a3e3a5aa1 default }" containerID=8332e39b55a561a5844ff8c89b3dd98b343ce47a3801fc3c578ad5ea49d4102b datapathConfiguration="&{false false false false false }" interface=lxcbcf40fd93916 k8sPodName=openstack/keystone-fernet-setup-bqk49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=33941 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3917 identity=33941 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8332e39b55 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3917 identity=33941 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8332e39b55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3917 identity=33941 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8332e39b55 endpointID=3917 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-bqk49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=1505e29c-e9dc-4e79-bb24-5ada96e851d0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8332e39b55 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3917 identity=33941 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-fernet-setup-bqk49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 2d99a01e-e968-452e-8dc5-2ba585e2a1db default }" containerID=f58991b495149f49a301426b517dc1018366d6693bb369ab61f965aa89cd8170 datapathConfiguration="&{false false false false false }" interface=lxc5e521e757691 k8sPodName=openstack/keystone-db-sync-r5vd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=53596 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=53596 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f58991b495 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=916 identity=53596 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f58991b495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=916 identity=53596 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03234947989232621 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=f58991b495 endpointID=916 k8sNamespace=openstack k8sPodName=keystone-db-sync-r5vd4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ff4aad35-4080-4bfd-9ef2-e2d43ac81005 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f58991b495 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=916 identity=53596 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-db-sync-r5vd4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 a1c8bc6d-e97d-4836-9573-ce65ff715b94 default }" containerID=e39cb2218c99e413fc84b331b765178b8bb130444c0c25259d93ee8c0ab3efa1 datapathConfiguration="&{false false false false false }" interface=lxcfc23fc7a7279 k8sPodName=openstack/keystone-rabbit-init-628vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=57232 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=57232 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e39cb2218c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=290 identity=57232 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e39cb2218c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=57232 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e39cb2218c endpointID=290 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-628vw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ec90de1a-8a07-41cd-aace-a3f2f20955da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e39cb2218c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=57232 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/keystone-rabbit-init-628vw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 ded28b34-26b6-442c-98dd-c5d8b2e16dc6 default }" containerID=9801047ef79d1b30d6d38daabc2184f2410260254fb1bc5941d00e6eb6faa46c datapathConfiguration="&{false false false false false }" interface=lxca9379ce64e82 k8sPodName=openstack/keystone-domain-manage-b6lq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9801047ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9801047ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9801047ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=9445 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9801047ef7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=603 identity=9445 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9801047ef7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=603 identity=9445 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9801047ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=9445 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9801047ef7 endpointID=603 k8sNamespace=openstack k8sPodName=keystone-domain-manage-b6lq9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=cbd1e286-5bb9-4fcd-afbd-a913e2598943 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9801047ef7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=603 identity=9445 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/keystone-domain-manage-b6lq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 73f99d3e-0d19-4d1c-87b2-198a9bbdc14e default }" containerID=28bb078475a36e30b7092a40be224be77fd46fbed52cb5b3b9a881dd16326c49 datapathConfiguration="&{false false false false false }" interface=lxc3f60be899c79 k8sPodName=openstack/keystone-bootstrap-d85pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=28027 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4036 identity=28027 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28bb078475 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4036 identity=28027 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=28bb078475 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4036 identity=28027 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28bb078475 endpointID=4036 k8sNamespace=openstack k8sPodName=keystone-bootstrap-d85pm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6ea5c211-fb0a-4191-a21e-c023a314ff5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=28bb078475 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4036 identity=28027 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-bootstrap-d85pm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 ff8941ac-c30e-4838-a9ea-4a28a3d54176 default }" containerID=f0a2810f2e3b4b7aa0c6f4b154df7ce3721b8bd37827ab61904c717898442d8f datapathConfiguration="&{false false false false false }" interface=lxcfb6a2c42fb4b k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0a2810f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0a2810f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0a2810f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0a2810f2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2445 identity=29312 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0a2810f2e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2445 identity=29312 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0a2810f2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2445 identity=29312 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=daemon level=info msg="Delete endpoint request" containerID=f0a2810f2e endpointID=2445 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f0a2810f2e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2445 identity=29312 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7744c820-3b6f-4427-9346-684f2027a8f8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 8ba63f1e-0c7b-4649-a0e1-568cd20a4ba2 default }" containerID=df82ce6b8160a2eaaffd6eaeb0dec0bbb9f503bb3828aaf941bfc675d116295b datapathConfiguration="&{false false false false false }" interface=lxcc822d303ff37 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=47313 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=517 identity=47313 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df82ce6b81 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=517 identity=47313 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=df82ce6b81 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=517 identity=47313 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 1f47c6e0-dc4f-4fff-9513-1f5fc4c06656 default }" containerID=1189461801274f0244f904d6149cd5a323995670d1d316837b3e0b2a1c5cfaee datapathConfiguration="&{false false false false false }" interface=lxc8a44f6d82f50 k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1189461801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1189461801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1189461801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=44609 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1189461801 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=167 identity=44609 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 14efdd8a-8ffe-4eeb-81be-86487600d4ea default }" containerID=69147876988f004d09718d98d11f9b268454ed13249c8f5bdb494b7c082f6a1e datapathConfiguration="&{false false false false false }" interface=lxc71e16dc3ed17 k8sPodName=openstack/barbican-db-init-4p6m9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6914787698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6914787698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6914787698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=1555 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6914787698 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=1555 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1189461801 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=167 identity=44609 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1189461801 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=167 identity=44609 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-api-7f94f7b6cb-88csj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6914787698 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1696 identity=1555 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6914787698 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=1555 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6914787698 endpointID=1696 k8sNamespace=openstack k8sPodName=barbican-db-init-4p6m9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=22747f0d-e02b-43e9-9861-b30f4aceac3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6914787698 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1696 identity=1555 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-db-init-4p6m9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 9a37154c-27ae-43ea-a9b9-9cf8248a4f00 default }" containerID=0382dd12981ca53e37aac85452e22a88d2421db4c76cc852cee3e179805a89c0 datapathConfiguration="&{false false false false false }" interface=lxc6963d2ffc1f8 k8sPodName=openstack/barbican-db-sync-nwn8k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0382dd1298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0382dd1298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0382dd1298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=32097 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0382dd1298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=32097 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0382dd1298 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=272 identity=32097 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0382dd1298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=32097 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0382dd1298 endpointID=272 k8sNamespace=openstack k8sPodName=barbican-db-sync-nwn8k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1db09257-c1f7-4ee6-867a-d821f64b93b2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0382dd1298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=272 identity=32097 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/barbican-db-sync-nwn8k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 ae9e20ce-4bc0-4196-8a4c-c17d391faa5c default }" containerID=39223677ff528a236836d45d7d53316406ef40ffda1811806a254460322d3d76 datapathConfiguration="&{false false false false false }" interface=lxca90e17bc75d1 k8sPodName=openstack/barbican-rabbit-init-j9qms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39223677ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39223677ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c15489b-7637-4430-894f-965860086efd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4c15489b-7637-4430-894f-965860086efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4c15489b-7637-4430-894f-965860086efd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4c15489b-7637-4430-894f-965860086efd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=39223677ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=34705 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4c15489b-7637-4430-894f-965860086efd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4c15489b-7637-4430-894f-965860086efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39223677ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3964 identity=34705 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39223677ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3964 identity=34705 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=endpoint level=info msg="Successful endpoint creation" containerID=39223677ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3964 identity=34705 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39223677ff endpointID=3964 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-j9qms subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4c15489b-7637-4430-894f-965860086efd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4c15489b-7637-4430-894f-965860086efd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=39223677ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3964 identity=34705 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/barbican-rabbit-init-j9qms subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 ddde70ce-742c-4500-a494-8de4a32e5b76 default }" containerID=2554894d0a93f7576ceef57daf70dccdc1f81606d853ccb3b35d296581a28b5a datapathConfiguration="&{false false false false false }" interface=lxc5a29aae2c5d1 k8sPodName=openstack/barbican-ks-service-g8v7m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2554894d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2554894d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2554894d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=3850 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2554894d0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=3850 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2554894d0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1422 identity=3850 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=endpoint level=info msg="Successful endpoint creation" containerID=2554894d0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1422 identity=3850 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2554894d0a endpointID=1422 k8sNamespace=openstack k8sPodName=barbican-ks-service-g8v7m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=735f53ea-6c33-4ff5-9fed-ae8b163b202a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2554894d0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1422 identity=3850 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/barbican-ks-service-g8v7m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 2e1795b0-b32d-44dc-b7df-cf2af3b48711 default }" containerID=755c91ed87fd88809fe8259bca7886e877ecfee62725c0b6ffe20f612de3f316 datapathConfiguration="&{false false false false false }" interface=lxcbb42bc522328 k8sPodName=openstack/barbican-ks-endpoints-z79dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=755c91ed87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=755c91ed87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=113017bd-02ff-4177-b45a-c3394812acb0,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=113017bd-02ff-4177-b45a-c3394812acb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=113017bd-02ff-4177-b45a-c3394812acb0;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=113017bd-02ff-4177-b45a-c3394812acb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=755c91ed87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identity=44112 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=113017bd-02ff-4177-b45a-c3394812acb0,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=113017bd-02ff-4177-b45a-c3394812acb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=755c91ed87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2835 identity=44112 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=755c91ed87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2835 identity=44112 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=755c91ed87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2835 identity=44112 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=755c91ed87 endpointID=2835 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-z79dq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=113017bd-02ff-4177-b45a-c3394812acb0 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=113017bd-02ff-4177-b45a-c3394812acb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=755c91ed87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2835 identity=44112 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-z79dq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 a022a919-bf16-473f-ab5d-4d315be33990 default }" containerID=650d55a2a98ce87f256d3612cde794bfd92c2ce02b78e73241c10dd5f1427072 datapathConfiguration="&{false false false false false }" interface=lxc436a5be88067 k8sPodName=openstack/barbican-ks-user-m688c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=650d55a2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=650d55a2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=650d55a2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=12759 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=650d55a2a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1509 identity=12759 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=650d55a2a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1509 identity=12759 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=endpoint level=info msg="Successful endpoint creation" containerID=650d55a2a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=12759 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=650d55a2a9 endpointID=1509 k8sNamespace=openstack k8sPodName=barbican-ks-user-m688c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0a27172b-161f-4bed-bcca-f145c3c63c12 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=650d55a2a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1509 identity=12759 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/barbican-ks-user-m688c subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.174 de91bc6b-e181-4236-b9c6-a374dada0a18 default }" containerID=a070c7dccc6788d3f61266bb1fde74f7399d57d5772f50d117b013d85ae3eab7 datapathConfiguration="&{false false false false false }" interface=lxc94d89ea73011 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a070c7dccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a070c7dccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a070c7dccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=10714 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a070c7dccc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2551 identity=10714 ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a070c7dccc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2551 identity=10714 ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a070c7dccc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2551 identity=10714 ipv4=10.0.0.174 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-9hcnh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.3 725bac3e-d3cd-4456-bfdf-b0740cfed98e default }" containerID=9ca38e43c6b1fc0199d7ce59b374dce7fecd2a508a695e036ff5d3fa4e101909 datapathConfiguration="&{false false false false false }" interface=lxc03907c75d10a k8sPodName=openstack/rook-ceph-detect-version-8sgrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6538b030-c4c6-435e-b985-799db66b6065,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6538b030-c4c6-435e-b985-799db66b6065,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=6538b030-c4c6-435e-b985-799db66b6065;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=6538b030-c4c6-435e-b985-799db66b6065;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=17322 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=6538b030-c4c6-435e-b985-799db66b6065,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=6538b030-c4c6-435e-b985-799db66b6065,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=973 identity=17322 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ca38e43c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=973 identity=17322 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca38e43c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=17322 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9ca38e43c6 endpointID=973 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8sgrm subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=6538b030-c4c6-435e-b985-799db66b6065 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=6538b030-c4c6-435e-b985-799db66b6065 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=9ca38e43c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=973 identity=17322 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8sgrm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 2bf3be8c-3bca-4d53-ba99-55438d853432 default }" containerID=2ca0e7373eb7cf124c7853c90affe57ef3694ecee43188ede50fb0b7bc7d469d datapathConfiguration="&{false false false false false }" interface=lxcc9447a0ff08a k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ca0e7373e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ca0e7373e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2ca0e7373e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=9460 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ca0e7373e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1416 identity=9460 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ca0e7373e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1416 identity=9460 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ca0e7373e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=9460 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2ca0e7373e endpointID=1416 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-7gxr7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b18a7e06-30a8-4075-ae5c-3145c3e57298 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2ca0e7373e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1416 identity=9460 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7gxr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 a64f8580-ee3e-4555-b2a4-8845827a01d4 default }" containerID=c6c728ecd5e6f52b1ec9b00432712b92043639e8c08440badd755c81906fd87a datapathConfiguration="&{false false false false false }" interface=lxc0401939d5938 k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6c728ecd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6c728ecd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6c728ecd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=29312 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6c728ecd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=29312 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6c728ecd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3757 identity=29312 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6c728ecd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3757 identity=29312 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=daemon level=info msg="Delete endpoint request" containerID=c6c728ecd5 endpointID=3757 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c6c728ecd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3757 identity=29312 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3351d7e1-a889-4688-8a12-26dd0568b9e4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 73535a8a-db13-46f0-8bbf-3e7dc91a84fa default }" containerID=7e2fd7e7a7a840f0a7342acc3259a7f99deb73f8db421c6aee4c1776af7f31b7 datapathConfiguration="&{false false false false false }" interface=lxca6a8d137f0d8 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e2fd7e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e2fd7e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7e2fd7e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=851 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e2fd7e7a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1234 identity=851 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e2fd7e7a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1234 identity=851 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e2fd7e7a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1234 identity=851 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 5e0883f5-627b-4e1c-b6ad-98689f248569 default }" containerID=de4d623636b7b9b00886648d99771b2049ecc6d3f3a89cbb534928e7c0a64bd9 datapathConfiguration="&{false false false false false }" interface=lxc898bd4279bf1 k8sPodName=openstack/glance-db-init-lljz5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=54872 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=54872 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de4d623636 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=158 identity=54872 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de4d623636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=54872 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de4d623636 endpointID=158 k8sNamespace=openstack k8sPodName=glance-db-init-lljz5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=57629f9a-8687-4e7c-92d5-1aeb1e90dce8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=de4d623636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=54872 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-db-init-lljz5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 11f016bc-7b30-4114-8728-991270addf6e default }" containerID=a64c2053573b15132685a8a3e63484c2aae0c7a4ce3754959d6827d051cac61f datapathConfiguration="&{false false false false false }" interface=lxc33e97916bf3f k8sPodName=openstack/glance-db-sync-qzxrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=9565 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=9565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a64c205357 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=90 identity=9565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=a64c205357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=9565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 875a7766-e1c8-45aa-b370-cd380d91368f default }" containerID=5510bf6aba0e21b152a56b22b66833abacb596401da171784fea0652578227d2 datapathConfiguration="&{false false false false false }" interface=lxc54e954ffb7ea k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5510bf6aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5510bf6aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5510bf6aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=32019 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5510bf6aba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=710 identity=32019 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 4d1b1ea7-9b88-4204-bcba-845184fd4cd4 default }" containerID=37ee65b2c78bfdd0c711dcc38c9d744272513d7c07839735e5b20d17be27a6df datapathConfiguration="&{false false false false false }" interface=lxc96274c2fe82c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37ee65b2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37ee65b2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37ee65b2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=50795 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37ee65b2c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=416 identity=50795 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5510bf6aba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=710 identity=32019 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=5510bf6aba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=710 identity=32019 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fxsgt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37ee65b2c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=416 identity=50795 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=37ee65b2c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=416 identity=50795 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-898rx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a64c205357 endpointID=90 k8sNamespace=openstack k8sPodName=glance-db-sync-qzxrr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=ea43b34d-79c4-4114-84d6-21f4530a4469 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a64c205357 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=9565 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-sync-qzxrr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0d34e0a2-f4e5-46ea-8669-349d53b7f590 default }" containerID=e8f32d769b37a77f7c17de11e76ab63d1946cdd7d237f7fc338bfd1381410b0d datapathConfiguration="&{false false false false false }" interface=lxc6161e553e2b7 k8sPodName=openstack/glance-rabbit-init-ljhcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=49680 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=49680 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8f32d769b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3680 identity=49680 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8f32d769b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3680 identity=49680 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8f32d769b endpointID=3680 k8sNamespace=openstack k8sPodName=glance-rabbit-init-ljhcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5085cd15-a4c2-41c7-824b-4e6b22f0d603 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e8f32d769b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3680 identity=49680 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-rabbit-init-ljhcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 ed4ef3b5-87c4-46c1-800f-00ced4edf109 default }" containerID=f6fd5c9aa522341ba372d859a09d8689d9ab0edaea028363a77de477129a4e4d datapathConfiguration="&{false false false false false }" interface=lxced6cf721e078 k8sPodName=openstack/glance-ks-service-cbvx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6fd5c9aa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6fd5c9aa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f6fd5c9aa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=964 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6fd5c9aa5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3235 identity=964 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f6fd5c9aa5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3235 identity=964 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6fd5c9aa5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=964 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6fd5c9aa5 endpointID=3235 k8sNamespace=openstack k8sPodName=glance-ks-service-cbvx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=3046827a-203f-4b8c-858e-bec5b10c8933 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f6fd5c9aa5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3235 identity=964 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-ks-service-cbvx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 92c17f8d-9f68-487b-826b-6ead52b2dc4b default }" containerID=7a6d7dd7c10a3e819ac1d39c4de44da08cb7d1788f81575120b617ccd152fb91 datapathConfiguration="&{false false false false false }" interface=lxcf669d4eca4e6 k8sPodName=openstack/glance-ks-endpoints-jfv2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a6d7dd7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a6d7dd7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a6d7dd7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=31265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a6d7dd7c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=127 identity=31265 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a6d7dd7c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=127 identity=31265 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a6d7dd7c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=31265 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a6d7dd7c1 endpointID=127 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jfv2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=37b997a9-8ddd-465f-88fb-a64ecdf9d2ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7a6d7dd7c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=127 identity=31265 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-jfv2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 688876e9-8da1-4c53-9d1a-109fdec4f02a default }" containerID=c875d8619c1f3e1ac89d164814d86aefc9d43ee362adca138d9f029666902b5d datapathConfiguration="&{false false false false false }" interface=lxc61c3fc2827ba k8sPodName=openstack/glance-ks-user-6b8l9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c875d8619c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c875d8619c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c875d8619c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=13356 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c875d8619c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1015 identity=13356 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c875d8619c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1015 identity=13356 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c875d8619c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=13356 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c875d8619c endpointID=1015 k8sNamespace=openstack k8sPodName=glance-ks-user-6b8l9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f5097ba9-5a3a-49ca-847a-13933462358d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c875d8619c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1015 identity=13356 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-ks-user-6b8l9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 c00c9633-c030-4765-a8ff-11b4662db036 default }" containerID=8044f1eb24ae3a348f2f12ac8a33e2fc334d8fb445f4c037dee14cce801785fc datapathConfiguration="&{false false false false false }" interface=lxc5d1b7343a5f4 k8sPodName=openstack/glance-metadefs-load-v6jll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=12433 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1359 identity=12433 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8044f1eb24 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1359 identity=12433 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=endpoint level=info msg="Successful endpoint creation" containerID=8044f1eb24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1359 identity=12433 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8044f1eb24 endpointID=1359 k8sNamespace=openstack k8sPodName=glance-metadefs-load-v6jll subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d8cb4a31-250c-46b6-ae6e-77d11d90aef5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8044f1eb24 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1359 identity=12433 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-metadefs-load-v6jll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 869139bc-a33e-469b-91d7-92daca556306 default }" containerID=1d3feb3fa3ee7a48edba8af048c1cf1ad60a971991fbc368c2fc17c55b4508af datapathConfiguration="&{false false false false false }" interface=lxc57fa3a970966 k8sPodName=openstack/glance-storage-init-868zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=19190 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=19190 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d3feb3fa3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=431 identity=19190 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d3feb3fa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=19190 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d3feb3fa3 endpointID=431 k8sNamespace=openstack k8sPodName=glance-storage-init-868zr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=8906f4d3-87a7-426e-ae3f-b46e1e0f7a21 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1d3feb3fa3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=431 identity=19190 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-storage-init-868zr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 ae949066-0254-40d6-a058-40469c108b1a default }" containerID=297ba943d9ad99f1e098b2e2a638bcb9f860625415bfc4f0c2687e43020a55bf datapathConfiguration="&{false false false false false }" interface=lxce61d456d36fa k8sPodName=openstack/glance-api-789d7999bf-zvrc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1434 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1553 identity=1434 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=297ba943d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1553 identity=1434 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=297ba943d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1553 identity=1434 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-api-789d7999bf-zvrc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 a92bd21c-df58-4900-a2b5-223e6b02026b default }" containerID=9bcd0124577582069667b88756347328617f79d02d1b752f797ca77d6c662b73 datapathConfiguration="&{false false false false false }" interface=lxc9ee0ea197041 k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bcd012457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bcd012457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bcd012457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=24043 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bcd012457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2720 identity=24043 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 fb5d59f3-afdf-4b4c-b742-19620c854873 default }" containerID=2d2978b1051704119af555af5d57afd7f5d2f3c2a204a4392899dc78416a3a32 datapathConfiguration="&{false false false false false }" interface=lxcdd038269443d k8sPodName=openstack/staffeln-db-init-4xflc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d2978b105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3403 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d2978b105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3403 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d2978b105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3403 identity=61677 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d2978b105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3403 identity=61677 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bcd012457 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2720 identity=24043 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 eb3dfd60-cd5d-4bb6-b384-8dd8d45aa77d default }" containerID=793175c5c25d4f92c99511b6f460024d599e2ccb120f3adfaa089b41a8e9b1b6 datapathConfiguration="&{false false false false false }" interface=lxc791752bf1a3e k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=793175c5c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=793175c5c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Successful endpoint creation" containerID=9bcd012457 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2720 identity=24043 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-conductor-558967b5cf-pqm58 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=793175c5c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=46990 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=793175c5c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=46990 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d2978b105 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3403 identity=61677 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d2978b105 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3403 identity=61677 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=793175c5c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=763 identity=46990 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=793175c5c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=46990 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/staffeln-api-74db9fd588-lgqn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d2978b105 endpointID=3403 k8sNamespace=openstack k8sPodName=staffeln-db-init-4xflc subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=fc594b82-d183-495c-bd38-4d2c446f02dc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=2d2978b105 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3403 identity=61677 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-db-init-4xflc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 a58aa5ea-42c7-4a55-acdf-691054388aaf default }" containerID=013f18ac726791946dd7fc1de714b3f4e63c7f7ef3ab15111f19e874e7622009 datapathConfiguration="&{false false false false false }" interface=lxc262d5a3b4438 k8sPodName=openstack/staffeln-db-sync-9f54z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=013f18ac72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=013f18ac72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=013f18ac72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identity=14588 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=aa5ee929-d5ce-4d18-861c-5647c570f0e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=013f18ac72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3891 identity=14588 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=013f18ac72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3891 identity=14588 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z subsys=endpoint level=info msg="Successful endpoint creation" containerID=013f18ac72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3891 identity=14588 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-sync-9f54z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager