level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="896.674µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="61.471µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="895.364µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.701µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=110.224644ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.911µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.261µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.092µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="56.962µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.452µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="654.748µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.11µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=14.079346ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.933549ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="42.101µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="57.161µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.705µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="108.343µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="90.093µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.714624ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="140.614µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="18.611µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.229.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.594111ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.759723ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.370215ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="11.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.911µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="35.451µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="18.69µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.552µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="372.271µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.71µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="257.426µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="931.256µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.4567ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.42µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.76µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.229 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.229 ipAddr.ipv6="" k8sNodeIP=199.204.45.229 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.229" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.76" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.229" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.229} {CiliumInternalIP 10.0.0.76}] 10.0.0.0/24 [] [] 10.0.0.77 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36757" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.68337916s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="22.731µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="59.023µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="58.312µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.391µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1725 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1725 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1725 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.792564243s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=294.026315ms file-path=/var/run/cilium/state/templates/58ec3cdac563312442ea3507cde5bde34f2663db00b6ddd64009754dcf0b5e36/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1725 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identityLabels="reserved:health" ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2316 identity=4 identityLabels="reserved:health" ipv4=10.0.0.77 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.190 0475c0a6-15fd-4db3-961f-5ffc086a5e4d default }" containerID=0d234db7599ed5e12a6489f8ef14a65c7fbd72272caaca9726ded1ba9b8bcaf1 datapathConfiguration="&{false false false false false }" interface=lxc7912fd2b4e6f k8sPodName=kube-system/coredns-7c96b6546b-r6c4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=13874 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=655 identity=13874 ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 d543b4b8-2fd3-4250-acf9-fb47b34698ec default }" containerID=d0035c15f7cb142e51754d483b0df16207580ff5d8bdf8e08b550cbf5852f26d datapathConfiguration="&{false false false false false }" interface=lxc4f846a321e72 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0035c15f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0035c15f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=78f80307-0b83-49ea-b620-943c82693aca,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=78f80307-0b83-49ea-b620-943c82693aca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=78f80307-0b83-49ea-b620-943c82693aca;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=78f80307-0b83-49ea-b620-943c82693aca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0035c15f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=15828 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=78f80307-0b83-49ea-b620-943c82693aca,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=78f80307-0b83-49ea-b620-943c82693aca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0035c15f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=15828 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.119930338s file-path=/var/run/cilium/state/templates/bd43f38160678eefb486daa28effb322d8b1db8f04df423a0b0eb03d1b40c31c/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=d0035c15f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=230 identity=15828 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0035c15f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=230 identity=15828 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2316 identity=4 ipv4=10.0.0.77 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d234db759 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=655 identity=13874 ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d234db759 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=655 identity=13874 ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d0035c15f7 endpointID=230 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tsgdb subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=78f80307-0b83-49ea-b620-943c82693aca k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=78f80307-0b83-49ea-b620-943c82693aca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=d0035c15f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=230 identity=15828 ipv4=10.0.0.6 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tsgdb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 ecef253e-f1cc-4fba-8182-4ddddc91cace default }" containerID=40992fae590b82f25f36f856bd40de618b706fa235676e4e3700038162b6aee6 datapathConfiguration="&{false false false false false }" interface=lxc8b6828cec812 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=4808 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=4808 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40992fae59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=617 identity=4808 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd subsys=endpoint level=info msg="Successful endpoint creation" containerID=40992fae59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=617 identity=4808 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pzjcd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1725 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01725 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01725 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01725 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01725:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1725 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 028af5a9-fd3f-4944-b244-c47a61f957c7 default }" containerID=3ee7ebeee28c8ec2fea78432b493844cc9c115d5b42b3c7cb27de031126c3313 datapathConfiguration="&{false false false false false }" interface=lxcac62938fdc05 k8sPodName=kube-system/coredns-67659f764b-dxsjn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ee7ebeee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ee7ebeee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3ee7ebeee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=13874 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ee7ebeee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=13874 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ee7ebeee2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=306 identity=13874 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ee7ebeee2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=306 identity=13874 ipv4=10.0.0.172 ipv6= k8sPodName=kube-system/coredns-67659f764b-dxsjn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 321a7f01-38b8-49e2-a154-0deb8752fc8e default }" containerID=5c0607896c36b6fea93b06cb6b91bda29577b02bc5b7a113594a4f818f044345 datapathConfiguration="&{false false false false false }" interface=lxc32dfb16ddf26 k8sPodName=kube-system/coredns-67659f764b-dfwnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c0607896c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c0607896c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5c0607896c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=13874 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c0607896c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2245 identity=13874 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c0607896c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2245 identity=13874 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c0607896c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2245 identity=13874 ipv4=10.0.0.87 ipv6= k8sPodName=kube-system/coredns-67659f764b-dfwnq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 57d99e1b-2299-4444-885b-0cd84671c748 default }" containerID=177bdfd3318b66cdb1538d43a47605a43d63ad487845e9f00d8bf2d304c81a16 datapathConfiguration="&{false false false false false }" interface=lxc2766bd066988 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=177bdfd331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=177bdfd331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=177bdfd331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=23238 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=177bdfd331 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=23238 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=177bdfd331 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3035 identity=23238 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=177bdfd331 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3035 identity=23238 ipv4=10.0.0.228 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-trjrg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d234db759 endpointID=655 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-r6c4f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=0d234db759 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=655 identity=13874 ipv4=10.0.0.190 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-r6c4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 995a46c6-98c6-4994-8fde-b52e279b5e06 default }" containerID=00ac5a88d45c38e3366b1043c0f38487849532ada4f12f20f75bff258416d597 datapathConfiguration="&{false false false false false }" interface=lxccaea3f33579a k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=29131 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=29131 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 27f59fa3-436f-49ec-9eb5-a280c1b68345 default }" containerID=1ffa3f80c9d29d965786222feae98e600b9516ed38f05fc8a8cb0ebad1ce5a0d datapathConfiguration="&{false false false false false }" interface=lxc74448a97081b k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.12 00b35b2e-7dec-4e8d-8a0f-2b807482c86e default }" containerID=23f4cc20bd66f7d9badacc5258998eecdadc90216e5ad79437849248e34b7cca datapathConfiguration="&{false false false false false }" interface=lxce3ccf875c0ec k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23f4cc20bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23f4cc20bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=1ffa3f80c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ffa3f80c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23f4cc20bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=37075 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23f4cc20bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=454 identity=37075 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ffa3f80c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=36637 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ffa3f80c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1318 identity=36637 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00ac5a88d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1152 identity=29131 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=00ac5a88d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1152 identity=29131 ipv4=10.0.0.241 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-6swvz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23f4cc20bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=454 identity=37075 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls subsys=endpoint level=info msg="Successful endpoint creation" containerID=23f4cc20bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=454 identity=37075 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-2tdls subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1ffa3f80c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1318 identity=36637 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ffa3f80c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1318 identity=36637 ipv4=10.0.0.64 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-swb4w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 de2edd60-cd64-4b16-82d1-38babca012a6 default }" containerID=123f3adfaa81ee1b7636386fffc5169091ab14a34294b9bf49eec6988ab7c277 datapathConfiguration="&{false false false false false }" interface=lxc7f4d74307341 k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=123f3adfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=123f3adfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=de31c6de-bb93-4559-a616-52056c4c293c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=de31c6de-bb93-4559-a616-52056c4c293c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=de31c6de-bb93-4559-a616-52056c4c293c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=de31c6de-bb93-4559-a616-52056c4c293c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=123f3adfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=1755 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=de31c6de-bb93-4559-a616-52056c4c293c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=de31c6de-bb93-4559-a616-52056c4c293c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=123f3adfaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=616 identity=1755 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=123f3adfaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=616 identity=1755 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=endpoint level=info msg="Successful endpoint creation" containerID=123f3adfaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=616 identity=1755 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=123f3adfaa endpointID=616 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rh782 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=de31c6de-bb93-4559-a616-52056c4c293c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=de31c6de-bb93-4559-a616-52056c4c293c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=123f3adfaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=616 identity=1755 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rh782 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 8851dee2-1888-41df-a82b-31702a44fd34 default }" containerID=fe124187722f8b6095bab80a8151aa96f883c59203ba3a26f667d2bf9e473512 datapathConfiguration="&{false false false false false }" interface=lxc77f2330e5cf3 k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe12418772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe12418772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=fe12418772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=23497 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe12418772 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1860 identity=23497 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe12418772 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1860 identity=23497 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe12418772 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1860 identity=23497 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe12418772 endpointID=1860 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xldpf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=cc55f504-e455-4b3c-aafa-458040b6c41d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=fe12418772 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1860 identity=23497 ipv4=10.0.0.243 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xldpf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 5c5ef0ea-0e2b-4362-8bc7-85af864e3261 default }" containerID=f2c9e950b9244092f36f0c85eea2f6541b30b48c4c34114624e761cd4c5bb007 datapathConfiguration="&{false false false false false }" interface=lxcd4097d381344 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2c9e950b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2c9e950b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2c9e950b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=39373 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2c9e950b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1681 identity=39373 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f2c9e950b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1681 identity=39373 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2c9e950b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1681 identity=39373 ipv4=10.0.0.54 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-srkp2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.40 8d2e7af4-38a5-4884-96fa-7bc1e363fdf7 default }" containerID=9a9aeca71c2ce0bcd23c2b7e5e1996f3014d13597555b0f50d6020b054e2bba4 datapathConfiguration="&{false false false false false }" interface=lxcf877260d345a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a9aeca71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4035 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a9aeca71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4035 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a9aeca71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4035 identity=22410 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a9aeca71c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4035 identity=22410 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a9aeca71c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4035 identity=22410 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a9aeca71c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4035 identity=22410 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9a9aeca71c endpointID=4035 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-s6v56 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=412b30d1-1ad2-4f6d-8cca-69cd54c3fd41 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=9a9aeca71c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4035 identity=22410 ipv4=10.0.0.40 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-s6v56 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 093b369f-6208-47d4-9e82-0c10691120db default }" containerID=a6be80415a9273534273507bc35ec30da01a956cc84006362dbff1bf52c78c9a datapathConfiguration="&{false false false false false }" interface=lxc3a4970272ad2 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6be80415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6be80415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a6be80415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=2477 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6be80415a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=2477 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6be80415a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=509 identity=2477 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6be80415a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=509 identity=2477 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8kk5p subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 27ab7b97-acf2-429d-826e-825be9f356cb default }" containerID=4ef0d7810655d44af6c6412fb8e27278d8cb36453fb977c77e5b74b2101138ad datapathConfiguration="&{false false false false false }" interface=lxc0a788fca14f1 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ef0d78106 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ef0d78106 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ef0d78106 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=46585 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ef0d78106 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3142 identity=46585 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ef0d78106 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3142 identity=46585 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ef0d78106 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3142 identity=46585 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-qb746 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.136 ac2d5e0b-b6a9-4bc7-afd4-a6bdbc3062b4 default }" containerID=6ff4fc6d5aeb0538e3607926ced4c5745c33927cad35507a41d8f4931d3f5236 datapathConfiguration="&{false false false false false }" interface=lxc224a6f52fcb2 k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ff4fc6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ff4fc6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ff4fc6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=54091 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6ff4fc6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=54091 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ff4fc6d5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2655 identity=54091 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ff4fc6d5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2655 identity=54091 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-hzb42 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 4e6e5f28-b205-4067-a191-caa5b6fdbcc0 default }" containerID=5ce4636bd821f2874e6f6346410f3d5b37453e9c500750c05ff798a433802a26 datapathConfiguration="&{false false false false false }" interface=lxc2acd3a1044c9 k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ce4636bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ce4636bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ce4636bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5ce4636bd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=33831 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ce4636bd8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=33831 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ce4636bd8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=33831 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 64c48d95-c947-4956-8e7f-ba6ab31db80b default }" containerID=e9eb0208f9089c6234154ca0c8ad221c37bca720e7d35a0d55bcaced980d7776 datapathConfiguration="&{false false false false false }" interface=lxc732fc081e8ed k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9eb0208f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9eb0208f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9eb0208f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=11806 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e9eb0208f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1651 identity=11806 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9eb0208f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1651 identity=11806 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9eb0208f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1651 identity=11806 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ce4636bd8 endpointID=639 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ce4636bd8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=33831 ipv4=10.0.0.212 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d05b8371-9cea-4afa-b450-d37322caf02e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 f2102514-b0e9-42b0-b3f5-0fa044a8199c default }" containerID=942a5da1e2820d8b79b3cf9be2fd44ef4ac89af6ed2fc0ab6bc81c5a323610a6 datapathConfiguration="&{false false false false false }" interface=lxc2a1947f14ca7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=942a5da1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=942a5da1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=942a5da1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=54604 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=942a5da1e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=54604 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=942a5da1e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=79 identity=54604 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=942a5da1e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=79 identity=54604 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 f6978fcb-beaa-447f-94b1-72e209163c64 default }" containerID=7f878a022e561fd679b2cf7c31ebe6e836604b3c815378a5cf73c89e7b9eb466 datapathConfiguration="&{false false false false false }" interface=lxce6d40ebe6fca k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f878a022e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f878a022e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f878a022e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=48298 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f878a022e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2594 identity=48298 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f878a022e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2594 identity=48298 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f878a022e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2594 identity=48298 ipv4=10.0.0.35 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 c4e6be6f-2ca4-42be-8437-93043683c09d default }" containerID=380731774fb2c3eb064fcc3673819bf01c81aac34582208e947100c81a30cc63 datapathConfiguration="&{false false false false false }" interface=lxcc38c5016ca26 k8sPodName=monitoring/node-feature-discovery-worker-tw2jw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=380731774f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=380731774f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=380731774f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=27583 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=380731774f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3301 identity=27583 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 178417b6-7c84-4d62-81f3-0e1c3081e78b default }" containerID=4d09d40c2efa2e62930636c43a6e3b6c4281da881dd1f0af256771f9cc2254a2 datapathConfiguration="&{false false false false false }" interface=lxcaea63a4a6e4f k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d09d40c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d09d40c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d09d40c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=28190 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d09d40c2e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=28190 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=380731774f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3301 identity=27583 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw subsys=endpoint level=info msg="Successful endpoint creation" containerID=380731774f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3301 identity=27583 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-tw2jw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4d09d40c2e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=358 identity=28190 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d09d40c2e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=358 identity=28190 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-mkhsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 84392292-dfad-4db1-912f-62e74bb9fffd default }" containerID=30d1c58e117985fbd5834516f9cc0990f916bcdc8e02d6635b048df0c0a6beaa datapathConfiguration="&{false false false false false }" interface=lxc807849db2c87 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30d1c58e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30d1c58e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30d1c58e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=55660 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30d1c58e11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=55660 ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=30d1c58e11 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=931 identity=55660 ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=30d1c58e11 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=931 identity=55660 ipv4=10.0.0.29 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-s9tqm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1725 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01725 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01725 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01725 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01725:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1725 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.011430194651480515 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.26 7b9d5e21-ca31-4c4b-ba4f-5d7668a73f0d default }" containerID=e048388c616562c35f7f0015bb3f9f7165b8150b1f17eaa3a174f29c9ef703f5 datapathConfiguration="&{false false false false false }" interface=lxc500f0848d61a k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e048388c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e048388c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e048388c61 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3416 identity=57051 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e048388c61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3416 identity=57051 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e048388c61 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3416 identity=57051 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=e048388c61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3416 identity=57051 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e048388c61 endpointID=3416 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-qsd2w subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=9ab5352c-9ab2-4e0f-ab5d-ac8babdd8139 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e048388c61 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3416 identity=57051 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-qsd2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.201 bd7a73f5-f328-4b46-b416-b344727e6e5c default }" containerID=2d42f64a1315cd2bbdf4c1c34307ece73177831af522a55b89b9c76f63f5cc17 datapathConfiguration="&{false false false false false }" interface=lxc49cf15e32c30 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=3988 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3011 identity=3988 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 2aa5af0d-a33d-40d6-b06f-aaffe4b62264 default }" containerID=36788201f7937a32605be02afcf2294cfe9f1dc209f1f470970260da9555c0ef datapathConfiguration="&{false false false false false }" interface=lxca68505fbcfaa k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36788201f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36788201f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36788201f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=47312 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36788201f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=47312 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d42f64a13 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3011 identity=3988 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d42f64a13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3011 identity=3988 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-z2dnk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=36788201f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1744 identity=47312 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=36788201f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1744 identity=47312 ipv4=10.0.0.194 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dfffdb56f-57qmm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 e4913eb2-d572-4f4f-bba8-07bb325b34ea default }" containerID=0cf43cac1666d48fc2ce7154e56f0421dd622d44af733f2ffe894a6b40e30839 datapathConfiguration="&{false false false false false }" interface=lxc4ccc61f147e6 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf43cac16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf43cac16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cf43cac16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10250 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cf43cac16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=10250 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cf43cac16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1281 identity=10250 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf43cac16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1281 identity=10250 ipv4=10.0.0.208 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-q8fkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 bafe08f9-0db8-406e-bb24-322a7fd08e14 default }" containerID=5e7632896d01a28eb4546a2472e788c01f152c152bb20dd76fc26ab57e23a5f6 datapathConfiguration="&{false false false false false }" interface=lxc91daabd4198b k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e7632896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e7632896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3dba9074-66f1-4135-b495-d02659067142,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=3dba9074-66f1-4135-b495-d02659067142,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=3dba9074-66f1-4135-b495-d02659067142;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=3dba9074-66f1-4135-b495-d02659067142;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e7632896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=25000 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3dba9074-66f1-4135-b495-d02659067142,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=3dba9074-66f1-4135-b495-d02659067142,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e7632896d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=25000 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e7632896d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=25000 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e7632896d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=25000 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e7632896d endpointID=228 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-nfvw7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=3dba9074-66f1-4135-b495-d02659067142 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=3dba9074-66f1-4135-b495-d02659067142 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5e7632896d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=25000 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nfvw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 0bc395c0-5616-48fe-b1ea-10f8ff651db9 default }" containerID=1712453190af0213cd3af8720b588af31a04cfa2c3f5c740bfa7baf65a978aff datapathConfiguration="&{false false false false false }" interface=lxca871325891c5 k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1712453190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1712453190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1712453190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1712453190 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=33831 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1712453190 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1902 identity=33831 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=endpoint level=info msg="Successful endpoint creation" containerID=1712453190 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1902 identity=33831 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 b26ba5b2-ae4f-4f93-8c4c-25b7fbe7e863 default }" containerID=4be880eb7127fdbcc823c1e5a1ae1fd1ec94658f2c1dbce49772ce93bbdedd90 datapathConfiguration="&{false false false false false }" interface=lxc1911b4a93205 k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4be880eb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4be880eb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4be880eb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4be880eb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3444 identity=33831 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4be880eb71 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3444 identity=33831 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4be880eb71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3444 identity=33831 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=daemon level=info msg="Delete endpoint request" containerID=1712453190 endpointID=1902 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1712453190 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1902 identity=33831 ipv4=10.0.0.44 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1237889-3185-42a1-8039-cbc5b1bddf0d subsys=endpoint level=info msg="Delete endpoint request" containerID=4be880eb71 endpointID=3444 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4be880eb71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3444 identity=33831 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-28fb4f7b-2974-482e-a3f5-c09ef7ffcdc3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 93944ec6-ed0f-4e8e-8ffe-730f00c58431 default }" containerID=24e1aae37c0af5279535563b8faa63eccd7fa3d809d8caf8cd45729c7157a368 datapathConfiguration="&{false false false false false }" interface=lxc0d7a928ba4d0 k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=2294 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=2294 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24e1aae37c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1073 identity=2294 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz subsys=endpoint level=info msg="Successful endpoint creation" containerID=24e1aae37c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1073 identity=2294 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-657gz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 a77ee27d-4fab-4cfe-9fe1-16a50b512c93 default }" containerID=5e713d440bd134af958bbb57e27115dd96aa998f9989e7c47e37594404164769 datapathConfiguration="&{false false false false false }" interface=lxcd31f4fbf7e7c k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e713d440b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e713d440b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e713d440b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=35396 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e713d440b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=296 identity=35396 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 c9d6d2a1-9e52-4847-8e44-f49c044f8e2c default }" containerID=2555df9db0d70c161e9251a9da37f14f19fab5211b0653f2fe9fbe0bef4965f3 datapathConfiguration="&{false false false false false }" interface=lxc8ec47b2c8294 k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2555df9db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2555df9db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2555df9db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2555df9db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2969 identity=33831 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e713d440b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=296 identity=35396 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e713d440b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=296 identity=35396 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2555df9db0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2969 identity=33831 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2555df9db0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2969 identity=33831 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 d0c9dac7-b4eb-43ee-a02a-987020da3941 default }" containerID=53b5791a5a9d2f65c377893ff58e36858842cf38298d46b218222e673c2aef84 datapathConfiguration="&{false false false false false }" interface=lxc60f2410da723 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53b5791a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53b5791a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53b5791a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=61081 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53b5791a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=61081 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=53b5791a5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=101 identity=61081 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53b5791a5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=101 identity=61081 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 97183046-df00-4a29-b4d6-e08f4e9d40d9 default }" containerID=0e08c4497553ec4f345af0469433f17566760b80040e38abda1f7da82adc8df0 datapathConfiguration="&{false false false false false }" interface=lxc787d30ec7180 k8sPodName=monitoring/vector-hvdz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e08c44975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e08c44975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e08c44975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=701 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e08c44975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=701 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e08c44975 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1484 identity=701 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e08c44975 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1484 identity=701 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/vector-hvdz9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2555df9db0 endpointID=2969 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2555df9db0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2969 identity=33831 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddc25027-e421-4709-9293-81df597044bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 a97d4235-647a-4d77-924b-91b9fa2de421 default }" containerID=41d9353e7558aec164fb03782b1b1828962edf06ec7a40d23316fabdf06a321c datapathConfiguration="&{false false false false false }" interface=lxcf4e1945822c9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=43575 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2498 identity=43575 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41d9353e75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2498 identity=43575 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41d9353e75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2498 identity=43575 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 706fadf4-3348-4f69-bfbd-71e2764a7e8e default }" containerID=244b1ef475721b92146fbd4b185a035a667366ab00c5d25c362315a64f009a58 datapathConfiguration="&{false false false false false }" interface=lxc780cb1759acd k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=244b1ef475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=244b1ef475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=244b1ef475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=62121 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=244b1ef475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=62121 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=244b1ef475 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1455 identity=62121 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=244b1ef475 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1455 identity=62121 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-nmkp5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.43 11831840-0655-417a-ade8-4e5fd6715af7 default }" containerID=3c79a3e28e596d4fc6b2e2cfba7cc5dc280a5f106f36635ab0f91c8a596da16f datapathConfiguration="&{false false false false false }" interface=lxcbc37589a9868 k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=5914 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=5914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c79a3e28e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3751 identity=5914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c79a3e28e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3751 identity=5914 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-zbq84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 930d8ff4-face-4c68-a696-8cad715e1bba default }" containerID=cdf0534de348e83308575a27c5b42e7fbaeb08de436c2109dbd4e5e3a3bab8f4 datapathConfiguration="&{false false false false false }" interface=lxc0e662d05e327 k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdf0534de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdf0534de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdf0534de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdf0534de3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=33831 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdf0534de3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=382 identity=33831 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdf0534de3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=33831 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=daemon level=info msg="Delete endpoint request" containerID=cdf0534de3 endpointID=382 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cdf0534de3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=382 identity=33831 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-507f2aec-fd3a-4e90-b838-197f09d4b3fa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 56140d88-cdaa-4419-bce7-71e716e8b34e default }" containerID=7040fce7f02248265a08854abec416e4c142b121faff6c0f823c61e97a1cbf8c datapathConfiguration="&{false false false false false }" interface=lxc2e2980f8eabd k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=7740 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=7740 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7040fce7f0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=294 identity=7740 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7040fce7f0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=294 identity=7740 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 c3159a2f-811b-40b8-86f5-32b01909fa88 default }" containerID=8df72656c06cb4f04f7025b2c0751eb4e60f87d11fbbd5803162822bbc93c3b2 datapathConfiguration="&{false false false false false }" interface=lxc3a2301ed574b k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=47985 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=47985 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 8d755cac-cfe1-4b17-a6ab-215e2ca85be2 default }" containerID=7362c2779395a4aec16d9bb52c8dafa09bb84a0635644dc861053cffab89eaad datapathConfiguration="&{false false false false false }" interface=lxcf7fd8b986b57 k8sPodName=openstack/keystone-credential-setup-59gtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7362c27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7362c27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7362c27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identity=49015 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7362c27793 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2187 identity=49015 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8df72656c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=693 identity=47985 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8df72656c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=693 identity=47985 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-api-59b7f9cbcf-bx2r6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7362c27793 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2187 identity=49015 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7362c27793 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2187 identity=49015 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7362c27793 endpointID=2187 k8sNamespace=openstack k8sPodName=keystone-credential-setup-59gtf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3990e67d-8e5a-4a9e-ba1b-0d332ee1c0b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7362c27793 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2187 identity=49015 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-59gtf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 2c4b027d-53a4-4163-90b6-063daf2a5209 default }" containerID=82ce4a180fe967bcd54cf7c1d83a9d1fddb91da45573c2febb4dfd13d0d89730 datapathConfiguration="&{false false false false false }" interface=lxc26e9a9214e5f k8sPodName=openstack/keystone-db-init-4fsw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82ce4a180f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82ce4a180f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82ce4a180f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=6725 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82ce4a180f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1578 identity=6725 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82ce4a180f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1578 identity=6725 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82ce4a180f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1578 identity=6725 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=82ce4a180f endpointID=1578 k8sNamespace=openstack k8sPodName=keystone-db-init-4fsw8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=423ba141-d2b8-482d-8db0-b9b1a58be034 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=82ce4a180f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1578 identity=6725 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-4fsw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 8859daf3-ac6b-423e-81e1-1d965d66444c default }" containerID=9f63661674ee25a8265e33b6a8df14c682c4c7485e6400f34a09c79251ce7c13 datapathConfiguration="&{false false false false false }" interface=lxc8584b4a8fcee k8sPodName=openstack/keystone-fernet-setup-qdd4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f63661674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f63661674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f63661674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=28979 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f63661674 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2950 identity=28979 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9f63661674 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2950 identity=28979 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f63661674 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2950 identity=28979 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f63661674 endpointID=2950 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qdd4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=0003c3fe-2de9-4419-bcae-76695adba1d9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f63661674 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2950 identity=28979 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/keystone-fernet-setup-qdd4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 1923bd95-5671-452b-8f4b-f4ebbc2c945f default }" containerID=6c8e4ed69e97080448700f1471723f9a0ef7fe40b2738d8a3a596f4cece98562 datapathConfiguration="&{false false false false false }" interface=lxcd2ca0671a5b9 k8sPodName=openstack/keystone-db-sync-slvx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=36186 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=36186 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c8e4ed69e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=689 identity=36186 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c8e4ed69e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=689 identity=36186 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c8e4ed69e endpointID=689 k8sNamespace=openstack k8sPodName=keystone-db-sync-slvx8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=c7454688-e276-49e7-b2f6-a8bb41a50447 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6c8e4ed69e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=689 identity=36186 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-slvx8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 4508c147-9059-4c55-89fd-4b81f63eb97d default }" containerID=186186f21638745a4583863673f5b32c85dbb04fa09cfe77cf894f518f3ae59e datapathConfiguration="&{false false false false false }" interface=lxcbafa01b7f408 k8sPodName=openstack/keystone-rabbit-init-9slbz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=65112 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=869 identity=65112 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=186186f216 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=869 identity=65112 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=endpoint level=info msg="Successful endpoint creation" containerID=186186f216 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=869 identity=65112 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=186186f216 endpointID=869 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-9slbz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c577e075-2b52-42ca-8eb4-ee0ee41f85f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=186186f216 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=869 identity=65112 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/keystone-rabbit-init-9slbz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 37714004-3749-4fa4-8ab1-4e24810f9e19 default }" containerID=78d6856c28156531ea97a716553f087fd3b5c9a38be92ffbabf6bc25de8fa626 datapathConfiguration="&{false false false false false }" interface=lxcc3004744959b k8sPodName=openstack/keystone-domain-manage-mj8rl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=5800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=5800 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=78d6856c28 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=15 identity=5800 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=endpoint level=info msg="Successful endpoint creation" containerID=78d6856c28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=15 identity=5800 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=78d6856c28 endpointID=15 k8sNamespace=openstack k8sPodName=keystone-domain-manage-mj8rl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=263a4123-11f7-4bf5-999c-113b733ecc88 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=78d6856c28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=15 identity=5800 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-domain-manage-mj8rl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 fdc695b7-a02b-4a47-af21-1aef62556772 default }" containerID=00277d2ec2b5e729ed5604d7369a97af48aaba236d7b16ce459e69f4aa2610b9 datapathConfiguration="&{false false false false false }" interface=lxcb085eeedbd3d k8sPodName=openstack/keystone-bootstrap-9pgsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00277d2ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00277d2ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00277d2ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=17487 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00277d2ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1286 identity=17487 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=00277d2ec2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1286 identity=17487 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=00277d2ec2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1286 identity=17487 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=daemon level=info msg="Delete endpoint request" containerID=00277d2ec2 endpointID=1286 k8sNamespace=openstack k8sPodName=keystone-bootstrap-9pgsz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=a4ff5d74-0f87-455f-a0c2-322771283be5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=00277d2ec2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1286 identity=17487 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/keystone-bootstrap-9pgsz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 3ccd1eaf-aa04-4677-997f-3ca8998817d8 default }" containerID=e91db7c352649a6125ecea63e40961cbf17b15984bd87df0afafd3aff751106e datapathConfiguration="&{false false false false false }" interface=lxceda285cbefba k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e91db7c352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e91db7c352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e91db7c352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e91db7c352 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=6 identity=33831 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e91db7c352 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=6 identity=33831 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=endpoint level=info msg="Successful endpoint creation" containerID=e91db7c352 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=33831 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=daemon level=info msg="Delete endpoint request" containerID=e91db7c352 endpointID=6 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e91db7c352 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=6 identity=33831 ipv4=10.0.0.221 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-07ce56dd-bed0-4ecf-934d-67681f511f3a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 9e61b4df-68c5-4b6b-86ab-35138b2372a1 default }" containerID=60c8178789a8df7da393e360383a2e0a461476bac967aa378c6cc7758da17f2d datapathConfiguration="&{false false false false false }" interface=lxc589d9e96452f k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60c8178789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60c8178789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60c8178789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=824 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60c8178789 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=824 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60c8178789 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1322 identity=824 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60c8178789 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=824 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 9102a13b-2098-4b31-a52f-0192a82fc046 default }" containerID=720ebfcb19b3f41a3e384d8e495577b1d7fb98287399c0cb28950c84a3e4f1a9 datapathConfiguration="&{false false false false false }" interface=lxce8465fd4437e k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=720ebfcb19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=720ebfcb19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=720ebfcb19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=14983 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=720ebfcb19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=578 identity=14983 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 01243ec5-6bbc-4654-bb76-1caaa479f7e9 default }" containerID=c943c4b8073764a89b438079f7c8dbab71e6908d82edf8b41a4529beb588970a datapathConfiguration="&{false false false false false }" interface=lxc433256d8d114 k8sPodName=openstack/barbican-db-init-gnwjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c943c4b807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2827 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c943c4b807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2827 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c943c4b807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2827 identity=4054 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c943c4b807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2827 identity=4054 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=720ebfcb19 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=578 identity=14983 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 subsys=endpoint level=info msg="Successful endpoint creation" containerID=720ebfcb19 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=578 identity=14983 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/barbican-api-5ff8b46b99-btp68 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c943c4b807 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2827 identity=4054 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c943c4b807 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2827 identity=4054 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c943c4b807 endpointID=2827 k8sNamespace=openstack k8sPodName=barbican-db-init-gnwjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e2583213-672f-4344-9fd1-0ff95fda8824 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c943c4b807 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2827 identity=4054 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-db-init-gnwjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 b3930dbd-9a34-4af9-9309-65fa024abddf default }" containerID=bbd99a31d902e9204b26af83dcccac2badaf1e5178544b72ac3e1c49f04faf8d datapathConfiguration="&{false false false false false }" interface=lxcdf69bc8d49ea k8sPodName=openstack/barbican-db-sync-tnt5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbd99a31d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbd99a31d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbd99a31d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=4170 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbd99a31d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=293 identity=4170 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbd99a31d9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=293 identity=4170 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbd99a31d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=4170 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbd99a31d9 endpointID=293 k8sNamespace=openstack k8sPodName=barbican-db-sync-tnt5l subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a75d183c-eeac-4ed3-8bb0-e28d8680b0bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bbd99a31d9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=293 identity=4170 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/barbican-db-sync-tnt5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 75907d72-19fc-43a5-8ffb-7240e5508145 default }" containerID=386fc33a92d43c866a192dd1c901fe92454e2fbf0d9787a4a518dcdd6bde24dd datapathConfiguration="&{false false false false false }" interface=lxc68513d383ec6 k8sPodName=openstack/barbican-rabbit-init-6fmpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=17054 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1501 identity=17054 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=386fc33a92 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1501 identity=17054 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=386fc33a92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1501 identity=17054 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=386fc33a92 endpointID=1501 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-6fmpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=cc416a4d-a629-4930-86c1-194ee6979ae7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=386fc33a92 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1501 identity=17054 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fmpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 eecc3750-1bd9-47b4-92b3-80a2e54241f5 default }" containerID=68ffda258ff95f0a1646e1b7ba2c5ddf3c2a767c818906c7b174b24f8a25d084 datapathConfiguration="&{false false false false false }" interface=lxc037315f14694 k8sPodName=openstack/barbican-ks-service-tfpq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68ffda258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68ffda258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68ffda258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=6958 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68ffda258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=6958 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=68ffda258f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1688 identity=6958 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68ffda258f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1688 identity=6958 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68ffda258f endpointID=1688 k8sNamespace=openstack k8sPodName=barbican-ks-service-tfpq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=aa6d05ff-d0c4-404a-8c26-36b16236cc64 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=68ffda258f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1688 identity=6958 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/barbican-ks-service-tfpq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 0f415b56-95a9-4613-9410-d2cc7ff1cfa8 default }" containerID=8c353d3fe6de8d0a643d673a61001e9bbfe82cbbacaa6ea71da85c270a2593e8 datapathConfiguration="&{false false false false false }" interface=lxcf2eb8f5cba0d k8sPodName=openstack/barbican-ks-endpoints-td68x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c353d3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c353d3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8c353d3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=12249 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c353d3fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=12249 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c353d3fe6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1110 identity=12249 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c353d3fe6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1110 identity=12249 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c353d3fe6 endpointID=1110 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-td68x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a9feaf96-e642-47d2-af98-0216f8ad4ede k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8c353d3fe6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1110 identity=12249 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-ks-endpoints-td68x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 129c0bfa-0ce9-4846-b0bf-7b03ffb3c878 default }" containerID=84fb26890a9255f825fceef6e5c198ba04a215096e21f8af766212800a21c54a datapathConfiguration="&{false false false false false }" interface=lxc58894cf41015 k8sPodName=openstack/barbican-ks-user-jsmfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84fb26890a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84fb26890a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84fb26890a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=10921 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84fb26890a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=10921 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=84fb26890a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2226 identity=10921 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=84fb26890a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2226 identity=10921 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84fb26890a endpointID=2226 k8sNamespace=openstack k8sPodName=barbican-ks-user-jsmfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=79753b54-6a81-40c4-b3a8-57bd259ab621 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=84fb26890a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2226 identity=10921 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-user-jsmfq subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.17 3af8774e-1bfe-4892-b41a-0e30e4025728 default }" containerID=7a1867ec4a7ac01f110768731a004b46188ef196be2424dd76810beb59f04bbf datapathConfiguration="&{false false false false false }" interface=lxcf1ff094e925b k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=36366 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=36366 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a1867ec4a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=558 identity=36366 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a1867ec4a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=558 identity=36366 ipv4=10.0.0.17 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-npm58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 0ee0fac0-e79f-4e5b-92ac-d2c257183337 default }" containerID=b3ef8850f9bce85c948e10f6dc736b2364ff58310742d3d29fa995c560ce4d74 datapathConfiguration="&{false false false false false }" interface=lxcc22daea8df4d k8sPodName=openstack/rook-ceph-detect-version-8x7rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3ef8850f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3ef8850f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3ef8850f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=18938 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3ef8850f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=18938 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3ef8850f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=207 identity=18938 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3ef8850f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=207 identity=18938 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.037648626347613186 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b3ef8850f9 endpointID=207 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8x7rn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=52ce1aef-9a98-4984-bf1f-3280bb03c1a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=b3ef8850f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=207 identity=18938 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8x7rn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 ccfc63a1-9b6d-4d0f-be24-68a8617a1d21 default }" containerID=b0c162cc931deb97b0f13e3efedcaa10aaf25318a953a301127a87c26f51582f datapathConfiguration="&{false false false false false }" interface=lxc318ff3009cad k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0c162cc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0c162cc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b0c162cc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=33831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0c162cc93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=33831 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0c162cc93 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=32 identity=33831 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0c162cc93 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=32 identity=33831 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=daemon level=info msg="Delete endpoint request" containerID=b0c162cc93 endpointID=32 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b0c162cc93 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=32 identity=33831 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb1b8dac-c0b2-43fd-be5f-d3fc1ce5e829 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 98968ace-9f84-4596-bc13-5cac8dda148b default }" containerID=46a2995c885f27fa6512e766e871af00907156794b05250fadd66653fd771440 datapathConfiguration="&{false false false false false }" interface=lxc8486d42535e6 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46a2995c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46a2995c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46a2995c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=57444 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46a2995c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=681 identity=57444 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=46a2995c88 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=681 identity=57444 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46a2995c88 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=681 identity=57444 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 20d2761c-e20e-4f4a-9c5d-61217edee6b2 default }" containerID=1411d39872a9beae9f5bd6ebbbdc862639f3a26b85122b6175d4a4f73ba7e86b datapathConfiguration="&{false false false false false }" interface=lxccf55ede835a7 k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1411d39872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1411d39872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f94abe32-9f03-4f64-9431-854f3e114071,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f94abe32-9f03-4f64-9431-854f3e114071,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=f94abe32-9f03-4f64-9431-854f3e114071;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=f94abe32-9f03-4f64-9431-854f3e114071;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1411d39872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=48982 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f94abe32-9f03-4f64-9431-854f3e114071,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f94abe32-9f03-4f64-9431-854f3e114071,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1411d39872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=689 identity=48982 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1411d39872 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=689 identity=48982 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1411d39872 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=689 identity=48982 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1411d39872 endpointID=689 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wvrg5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=f94abe32-9f03-4f64-9431-854f3e114071 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=f94abe32-9f03-4f64-9431-854f3e114071 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=1411d39872 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=689 identity=48982 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wvrg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 0089e1f1-2908-4d21-be1b-9c3e14f03353 default }" containerID=107864fbea37398f88b68d755fd9986cdf35839fc068a413a828dd68ce008ac9 datapathConfiguration="&{false false false false false }" interface=lxc8678d15412e2 k8sPodName=openstack/glance-db-init-ttcb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=107864fbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=107864fbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=107864fbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=19870 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=107864fbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=630 identity=19870 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=107864fbea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=630 identity=19870 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=107864fbea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=630 identity=19870 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=107864fbea endpointID=630 k8sNamespace=openstack k8sPodName=glance-db-init-ttcb5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=adca1073-6909-431a-ad4d-a903fd5d1dc2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=107864fbea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=630 identity=19870 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-db-init-ttcb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 dcc9eed0-ea65-4d39-b047-1d83102346a7 default }" containerID=f28bd3dc853299c6d3829fcb8c3d9371e267a37048946e277b678fbf9e455d04 datapathConfiguration="&{false false false false false }" interface=lxcf59e6245c273 k8sPodName=openstack/glance-db-sync-hsmbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=46714 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2048 identity=46714 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f28bd3dc85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2048 identity=46714 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f28bd3dc85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2048 identity=46714 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f28bd3dc85 endpointID=2048 k8sNamespace=openstack k8sPodName=glance-db-sync-hsmbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=8d8ba15d-2c13-463d-8527-9e2b754ebf9f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f28bd3dc85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2048 identity=46714 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/glance-db-sync-hsmbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 8e06412c-94e4-451b-a4b9-7b60d2207e73 default }" containerID=21e9cbefb28dc043e1e6396565739a1613c1b8ddf31b68b5a44d376dcbabc29d datapathConfiguration="&{false false false false false }" interface=lxc585b311ecff2 k8sPodName=openstack/glance-rabbit-init-4q957 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21e9cbefb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21e9cbefb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21e9cbefb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21e9cbefb2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3221 identity=606 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21e9cbefb2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3221 identity=606 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21e9cbefb2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3221 identity=606 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=daemon level=info msg="Delete endpoint request" containerID=21e9cbefb2 endpointID=3221 k8sNamespace=openstack k8sPodName=glance-rabbit-init-4q957 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9c51bcde-cfbd-464b-82ac-a80afc880e3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=21e9cbefb2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3221 identity=606 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/glance-rabbit-init-4q957 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 0a7dd739-5570-4e53-bb54-151ede8a9ec6 default }" containerID=8143e4c8d640c4885035ba5b6cf4c03e62560f2d90a21d9d446556acab7d27cd datapathConfiguration="&{false false false false false }" interface=lxcf8eb25bbf99b k8sPodName=openstack/glance-ks-service-jtqvr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3199 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3199 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3199 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3199 identity=7996 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3199 identity=7996 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8143e4c8d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3199 identity=7996 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8143e4c8d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3199 identity=7996 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8143e4c8d6 endpointID=3199 k8sNamespace=openstack k8sPodName=glance-ks-service-jtqvr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=e97065bf-69f8-43a1-aff6-d3350a91d64f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8143e4c8d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3199 identity=7996 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-ks-service-jtqvr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 c3396622-15bb-4787-b643-e540caf809c9 default }" containerID=cd47c3e39c0c69a22b79f6368ea27df9784af88e6f59d5b097e0ad442decaf07 datapathConfiguration="&{false false false false false }" interface=lxc64ab8f710460 k8sPodName=openstack/glance-ks-endpoints-jvf6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd47c3e39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd47c3e39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cd47c3e39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=64133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd47c3e39c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1451 identity=64133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cd47c3e39c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1451 identity=64133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd47c3e39c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1451 identity=64133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd47c3e39c endpointID=1451 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-jvf6t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c9e2c710-9593-4d72-b762-8a5a03a21241 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cd47c3e39c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1451 identity=64133 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-jvf6t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 ea99a42e-d307-43e2-af5b-c75aa06855ad default }" containerID=a5cdfcfc7140d5063508be9fc882cb9c2807faa0159c21e0ce677f3edaab5133 datapathConfiguration="&{false false false false false }" interface=lxc323dd2e88364 k8sPodName=openstack/glance-ks-user-zv9l7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9f1e058-a80e-4245-a163-a44857a58715,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d9f1e058-a80e-4245-a163-a44857a58715,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d9f1e058-a80e-4245-a163-a44857a58715;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d9f1e058-a80e-4245-a163-a44857a58715;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=14093 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9f1e058-a80e-4245-a163-a44857a58715,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d9f1e058-a80e-4245-a163-a44857a58715,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2542 identity=14093 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5cdfcfc71 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2542 identity=14093 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5cdfcfc71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2542 identity=14093 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 337778bb-fd7f-4585-a134-78f23c131f48 default }" containerID=bfc067d47204e95586d1462fa2536889da5d9f62b323bc6d010a3327e532174a datapathConfiguration="&{false false false false false }" interface=lxcc53d900e7691 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=41131 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=41131 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfc067d472 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2260 identity=41131 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfc067d472 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2260 identity=41131 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-9l4sv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.137 4ee35ac3-044a-43b7-99e4-ef62fb3c38f7 default }" containerID=25077882f5a2b85f53304c2331de25820eb6844e1cc92876633201e58c330ca0 datapathConfiguration="&{false false false false false }" interface=lxce3a5f763705e k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25077882f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25077882f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25077882f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=21518 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25077882f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=758 identity=21518 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25077882f5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=758 identity=21518 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25077882f5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=758 identity=21518 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-5w264 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5cdfcfc71 endpointID=2542 k8sNamespace=openstack k8sPodName=glance-ks-user-zv9l7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d9f1e058-a80e-4245-a163-a44857a58715 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d9f1e058-a80e-4245-a163-a44857a58715 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a5cdfcfc71 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2542 identity=14093 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/glance-ks-user-zv9l7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 cdf2e33f-b55a-478a-b81e-4258a78efd41 default }" containerID=6aac8d1d7a3b99b5d01b2aebf20d98ff8f01b4f8f03c6d9ded2a55efb0f9d923 datapathConfiguration="&{false false false false false }" interface=lxc294a0c16af38 k8sPodName=openstack/glance-metadefs-load-6sqmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6aac8d1d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6aac8d1d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6aac8d1d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=10640 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6aac8d1d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2470 identity=10640 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6aac8d1d7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2470 identity=10640 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6aac8d1d7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2470 identity=10640 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6aac8d1d7a endpointID=2470 k8sNamespace=openstack k8sPodName=glance-metadefs-load-6sqmt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=ec817660-10b3-415a-a997-a595ec8c63e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6aac8d1d7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2470 identity=10640 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-metadefs-load-6sqmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 633d30a2-2889-468a-b591-8465c4585bc5 default }" containerID=d37c7120cdf321ade2dd4e34eb816b78873afdbe18dc0b5e6610fe96cac64ef0 datapathConfiguration="&{false false false false false }" interface=lxcfcfe438505c9 k8sPodName=openstack/glance-storage-init-d8cxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d37c7120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d37c7120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d37c7120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=25986 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d37c7120cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=513 identity=25986 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d37c7120cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=513 identity=25986 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d37c7120cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=513 identity=25986 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d37c7120cd endpointID=513 k8sNamespace=openstack k8sPodName=glance-storage-init-d8cxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=fa051baa-a4bd-43c0-bb70-72c6e3610883 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d37c7120cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=513 identity=25986 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/glance-storage-init-d8cxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 bfbcee06-8fe8-4192-9d2a-fed0b1746976 default }" containerID=e1dc235e1d2e6e3251fec97c091d80ef7a273d137308e88c42d41f4d984207cf datapathConfiguration="&{false false false false false }" interface=lxc7f68825b3994 k8sPodName=openstack/glance-api-5479bffdc-nhctz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1dc235e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1dc235e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1dc235e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=7389 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1dc235e1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=7389 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1dc235e1d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1910 identity=7389 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1dc235e1d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1910 identity=7389 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/glance-api-5479bffdc-nhctz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 aceb67f8-950c-4d94-a5be-fcde9f01115c default }" containerID=46d990cf6c3c89df9c6eff87d3f9ab96b3c80cdea3cf18559421d6913be4b8ea datapathConfiguration="&{false false false false false }" interface=lxca0f8478f80a8 k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=35673 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1502 identity=35673 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 7b23e16e-a474-423e-bdc1-113aba725894 default }" containerID=432100fee20477e75a1afb3fbcdb60e976db91e8704ff15efbac3f7d172139ac datapathConfiguration="&{false false false false false }" interface=lxcbc88199e9b76 k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=432100fee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=432100fee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=432100fee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identity=53332 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=432100fee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3825 identity=53332 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46d990cf6c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1502 identity=35673 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=46d990cf6c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1502 identity=35673 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/staffeln-api-5fcd5f5d69-7gvqk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.22 cd985acc-5400-48b3-b9b0-f8d32bc9d578 default }" containerID=91bc38c20e676d1be62836f174e407d0a9650b3332a2d5dce7ee831b8307c4c5 datapathConfiguration="&{false false false false false }" interface=lxc05fc7dfd1f7b k8sPodName=openstack/staffeln-db-init-fbhv2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91bc38c20e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91bc38c20e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91bc38c20e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identity=60202 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91bc38c20e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2407 identity=60202 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=432100fee2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3825 identity=53332 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=432100fee2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3825 identity=53332 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-conductor-64cb97bcdb-ptzvw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=91bc38c20e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2407 identity=60202 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91bc38c20e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2407 identity=60202 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=91bc38c20e endpointID=2407 k8sNamespace=openstack k8sPodName=staffeln-db-init-fbhv2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=5aa0f2f2-abce-41b2-952b-145c46ff6f2f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=91bc38c20e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2407 identity=60202 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-fbhv2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 4486d680-7237-4d65-968a-472d703342d1 default }" containerID=b4da7595a07fa323d602884c0a9ce556c666e06816d0a377bfe840c5726a1d80 datapathConfiguration="&{false false false false false }" interface=lxc482b79ec4452 k8sPodName=openstack/staffeln-db-sync-kcz7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4da7595a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4da7595a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4da7595a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=29410 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0bf2f1c5-a55e-4492-aafb-6b1fd3d96b5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b4da7595a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2028 identity=29410 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4da7595a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2028 identity=29410 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4da7595a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2028 identity=29410 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/staffeln-db-sync-kcz7w subsys=daemon