level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.004695ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="50.572µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="928.852µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="6.17µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.040394ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.81µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.741µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="73.992µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="74.752µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="83.862µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="424.18µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.487357ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.483664ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="56.421µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="43.021µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="227.956µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="95.813µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="70.702µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.338777ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="132.403µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.571µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="10.161µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.240.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.775992ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.565636ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.177716ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="2.44µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.47µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="32.051µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="20.701µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.662µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="412.02µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.93µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="267.296µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.005344ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.567247ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.37µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.831µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.240 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.240 ipAddr.ipv6="" k8sNodeIP=199.204.45.240 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.240" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.3" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.240" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.240} {CiliumInternalIP 10.0.0.3}] 10.0.0.0/24 [] [] 10.0.0.214 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40323" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.654379735s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="20.251µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="7.12µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="46.731µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="14.1µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1892 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.601420099s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.47054ms file-path=/var/run/cilium/state/templates/47cd81b3658daec0a4151375f71c5155b9ff0cf803f52b2f4b7ca194056460b4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 436380c1-af14-4ce6-b7af-9dc2957a3d08 default }" containerID=b44ab1cbee108cac96881aa10c9be83596f46d2bc74db195863dabdf39b5dcce datapathConfiguration="&{false false false false false }" interface=lxc79f131ccedbc k8sPodName=kube-system/coredns-7c96b6546b-v8ptt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 edcc7896-7379-4c17-805a-5f1714e5035a default }" containerID=967b24feaa8fab7e6515f56b379f19f46fdc2ed0305e120f91a10a79ff5f6b39 datapathConfiguration="&{false false false false false }" interface=lxc1f14d1df6110 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=endpoint level=info msg="New endpoint" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=893 identity=831 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=10053 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2885 identity=10053 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identityLabels="reserved:health" ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=4 identityLabels="reserved:health" ipv4=10.0.0.214 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.075888663s file-path=/var/run/cilium/state/templates/4dae09f3a987af7afd6e792b1925e76ca76df69b6314a571f58b098b9c09515b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=b44ab1cbee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=893 identity=831 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b44ab1cbee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=893 identity=831 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=967b24feaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2885 identity=10053 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=967b24feaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2885 identity=10053 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2792 identity=4 ipv4=10.0.0.214 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=967b24feaa endpointID=2885 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-9jn6f subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=f84d039a-8ff1-493e-a655-f342d4677ce3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=967b24feaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2885 identity=10053 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-9jn6f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 a1d45dcf-449d-4e60-9d3c-493437090c7b default }" containerID=47a3e1ad8c9994bc23d4014f64be7e96a2f77286cfe8543c7d1b17d41d2c51ab datapathConfiguration="&{false false false false false }" interface=lxc8d95aaf5c42d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=15019 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=511 identity=15019 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47a3e1ad8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=511 identity=15019 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47a3e1ad8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=511 identity=15019 ipv4=10.0.0.230 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-pnrq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1892 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01892 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01892 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01892 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01892:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 0c619db3-c73d-4995-87fa-cfdcd13790a9 default }" containerID=a7cb795095c236c0c56831f76d0eb339f70c9f31901c4cbbf449ed045e0aec9f datapathConfiguration="&{false false false false false }" interface=lxce2629d7e7fa6 k8sPodName=kube-system/coredns-67659f764b-22vq2 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.206 f68c2bb0-bc5f-40df-8e09-359d800bad32 default }" containerID=5c33072985b115a5cf6439b8a86626582e6e784b0b547726c6524a242731b91d datapathConfiguration="&{false false false false false }" interface=lxc54df1dfdaace k8sPodName=kube-system/coredns-67659f764b-skcx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7cb795095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 subsys=endpoint level=info msg="New endpoint" containerID=5c33072985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7cb795095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c33072985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a7cb795095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5c33072985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=831 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7cb795095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1138 identity=831 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c33072985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3074 identity=831 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c33072985 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3074 identity=831 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c33072985 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3074 identity=831 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-67659f764b-skcx2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a7cb795095 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1138 identity=831 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7cb795095 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1138 identity=831 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-22vq2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.150 8ef459dc-7780-4002-96a6-b4d3ed97f3aa default }" containerID=ee5733d6115e78dd5da378f445696d05acec62d077ba237eb81021424aabb6ac datapathConfiguration="&{false false false false false }" interface=lxca01fa8f204d2 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=37110 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2213 identity=37110 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee5733d611 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2213 identity=37110 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee5733d611 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2213 identity=37110 ipv4=10.0.0.150 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-x8ctx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b44ab1cbee endpointID=893 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-v8ptt subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=b44ab1cbee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=893 identity=831 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-v8ptt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 2fc5efa2-ad20-4423-83dc-b1432de3ee0b default }" containerID=5f1ba87f3076345f89c92ca8d7c8e3576de0776590e23d5686fd7daec1357652 datapathConfiguration="&{false false false false false }" interface=lxc228ee79d0fe0 k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.10 3cb27658-8ae0-4b20-88a8-37004cfd25ec default }" containerID=7b3c9365cc990dbaabeb5da4b484f4dbbff8afc8fce01003c1d11f2ee17eb685 datapathConfiguration="&{false false false false false }" interface=lxc0bb99b5eabd3 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 subsys=endpoint level=info msg="New endpoint" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 08dee27f-6cf3-40e8-b0c2-b66218320e2d default }" containerID=8d1b584a8501acd076a483592a8ff3a00ee7fe60e4cabf4b0164316b9a3c2fbc datapathConfiguration="&{false false false false false }" interface=lxc3afd946af95d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identity=12388 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1441 identity=12388 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=16671 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=16671 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=27234 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3036 identity=27234 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b3c9365cc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=32 identity=16671 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b3c9365cc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=32 identity=16671 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-j2gxf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f1ba87f30 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1441 identity=12388 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f1ba87f30 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1441 identity=12388 ipv4=10.0.0.20 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6tgn6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d1b584a85 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3036 identity=27234 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d1b584a85 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3036 identity=27234 ipv4=10.0.0.184 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-kk4vk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 580c9bc1-8500-4c8c-8ef2-727e9981260a default }" containerID=732ee6df3b18ddac206ae5b94ede04a8c2b042a407dddb84559dfbf19b55cba0 datapathConfiguration="&{false false false false false }" interface=lxce9a3b27fc82d k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=732ee6df3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=732ee6df3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=732ee6df3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=5976 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=732ee6df3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=5976 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=732ee6df3b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2396 identity=5976 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=732ee6df3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2396 identity=5976 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=732ee6df3b endpointID=2396 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-r8rmg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=7e8a227e-57c0-4ea3-9e7a-b6e053fce65d k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=732ee6df3b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2396 identity=5976 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r8rmg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 64fadef4-4f56-42e2-afc7-7b028167d6d7 default }" containerID=cf91b7397b772265ee1afb87a7fb58762101d0f3a9da0fc20c017e3fc43b7a64 datapathConfiguration="&{false false false false false }" interface=lxcc44b500a648a k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=24428 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=24428 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf91b7397b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=257 identity=24428 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf91b7397b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=257 identity=24428 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf91b7397b endpointID=257 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-q2m74 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=be17c3c1-f2b8-4c56-806f-8926f2708554 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=cf91b7397b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=257 identity=24428 ipv4=10.0.0.233 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-q2m74 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 91840127-927b-4fe7-945a-ca22f10175cb default }" containerID=6b2a09879f927cd488c8aaa808bd29750ba9bf3175e30319c3718f9956a6c0f3 datapathConfiguration="&{false false false false false }" interface=lxc6c3cda104a03 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b2a09879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b2a09879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b2a09879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=3281 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b2a09879f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2669 identity=3281 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6b2a09879f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2669 identity=3281 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b2a09879f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2669 identity=3281 ipv4=10.0.0.207 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s6thj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 313ffbeb-b43c-42ff-b89b-202123bf429a default }" containerID=81da5586c8211bc3d1485dd9229c6c7c6075287421aa559af3fca318bf69fc2c datapathConfiguration="&{false false false false false }" interface=lxc5824124ec363 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81da5586c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81da5586c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=19086daa-8deb-4408-a75b-0c022883d076,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=19086daa-8deb-4408-a75b-0c022883d076,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=19086daa-8deb-4408-a75b-0c022883d076;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=19086daa-8deb-4408-a75b-0c022883d076;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81da5586c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=47492 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=19086daa-8deb-4408-a75b-0c022883d076,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=19086daa-8deb-4408-a75b-0c022883d076,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81da5586c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1616 identity=47492 ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81da5586c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1616 identity=47492 ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=81da5586c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1616 identity=47492 ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=81da5586c8 endpointID=1616 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-jhkwd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=19086daa-8deb-4408-a75b-0c022883d076 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=19086daa-8deb-4408-a75b-0c022883d076 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=81da5586c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1616 identity=47492 ipv4=10.0.0.167 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-jhkwd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6fa395d2-3281-4223-859a-2b863fb9e0ac] Description:}]" policyAddRequest=523726a2-dd44-4c59-9811-06ad41217bdc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=523726a2-dd44-4c59-9811-06ad41217bdc policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=998967eb-c56c-4df5-a2c4-755aff741378] Description:}]" policyAddRequest=a165dc3c-e67b-46ca-8020-796c40df4631 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a165dc3c-e67b-46ca-8020-796c40df4631 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.45 690d8432-ab4d-4b64-808a-73b8570b51ee default }" containerID=11a42a29bc09ea6ce3ef6e2ec38aa6a49c42288f5d33f8400cade4d8146b2987 datapathConfiguration="&{false false false false false }" interface=lxce8bcc9ed2fca k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=4233 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=4233 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11a42a29bc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2444 identity=4233 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp subsys=endpoint level=info msg="Successful endpoint creation" containerID=11a42a29bc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2444 identity=4233 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-jdzgp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 d05a9980-4f7a-4b3f-9a4a-eca8db07fcb2 default }" containerID=01f2d36b3e0d8407a68a0f1964355de646747a347703dab2c408723de0e27883 datapathConfiguration="&{false false false false false }" interface=lxc754dbf850093 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01f2d36b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01f2d36b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01f2d36b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=24381 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01f2d36b3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=24381 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01f2d36b3e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2192 identity=24381 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=01f2d36b3e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2192 identity=24381 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-7hjkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 4b2390c6-fc58-4dca-8ba6-724d842b3cff default }" containerID=159724ac1397ccb1e118df33ed5affa7bcf9ec7a76ea141c8541f87941849f19 datapathConfiguration="&{false false false false false }" interface=lxc8e95d19eba93 k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=23266 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=23266 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=159724ac13 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=759 identity=23266 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=159724ac13 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=759 identity=23266 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dznvm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 4acc7de4-4d24-4c6c-806c-2422408f1648 default }" containerID=48550ed2db10683bd5aa766e306a07cd7d1cef7bf83c4a7e4d94a43e94c9575c datapathConfiguration="&{false false false false false }" interface=lxc507374c49762 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48550ed2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48550ed2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48550ed2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=17472 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48550ed2db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2106 identity=17472 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=48550ed2db datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2106 identity=17472 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48550ed2db datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2106 identity=17472 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 83d5c8bf-632d-48f2-8e74-0a12c576eb85 default }" containerID=71beda7316fb39bc63f568190fc5dbec00fdc6cf25039d02da6d3d19c0fc46b9 datapathConfiguration="&{false false false false false }" interface=lxcf7b39fcd1418 k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71beda7316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71beda7316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71beda7316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71beda7316 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=934 identity=32597 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71beda7316 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=934 identity=32597 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=71beda7316 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=934 identity=32597 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71beda7316 endpointID=934 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=71beda7316 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=934 identity=32597 ipv4=10.0.0.136 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b1a1076c-1c81-43af-b03e-02002629acd2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 f5b7394d-bead-451d-8dea-08b9e557a9dd default }" containerID=0d2b1c59d747b22daf86da78c1fceb52b3ec141b66064a378d8fb77c5c40e516 datapathConfiguration="&{false false false false false }" interface=lxc30d6b5cc53c7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d2b1c59d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d2b1c59d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d2b1c59d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=28115 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d2b1c59d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=28115 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d2b1c59d7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=356 identity=28115 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d2b1c59d7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=356 identity=28115 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ea855363-6022-4d78-9226-09c8c7fbb07c] Description:}]" policyAddRequest=bfde022b-0285-4035-bdac-b089e8017e96 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bfde022b-0285-4035-bdac-b089e8017e96 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.155 a05c593a-7162-4a16-b078-54313a0369e0 default }" containerID=50d5d84cb63d79445925e86938e30d079e38a6d9d6a08b43c4ba33210b344bda datapathConfiguration="&{false false false false false }" interface=lxc724a0017470f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50d5d84cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50d5d84cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50d5d84cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=6125 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=50d5d84cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=6125 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50d5d84cb6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=389 identity=6125 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50d5d84cb6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=389 identity=6125 ipv4=10.0.0.155 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010479932906786425 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.11 2ea30f02-4280-4898-ad23-5ccea7ae01bf default }" containerID=caf41d19336aa4bede255d59c0fbfc68a8ef14c6dce1dae7387aa216355de428 datapathConfiguration="&{false false false false false }" interface=lxc7e6a33271017 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.67 8ffa9fe5-2267-41dd-8837-535e3f9d851c default }" containerID=8778f46011d81148718a5aea82224053c4e8f94bfb16484be162437203f10bc9 datapathConfiguration="&{false false false false false }" interface=lxc273dba3d4920 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caf41d1933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf subsys=endpoint level=info msg="New endpoint" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caf41d1933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 72514787-5977-40b1-a9ac-2beb6204f0d9 default }" containerID=e1add30f1ba0332edccec1f74cbea477fa98315bca4ac9d919b6cde1c3a1b871 datapathConfiguration="&{false false false false false }" interface=lxc7a4f9fef6655 k8sPodName=monitoring/node-feature-discovery-worker-q5ljf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=caf41d1933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=3567 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=caf41d1933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=3567 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=11569 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2269 identity=11569 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=40717 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=40717 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caf41d1933 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2271 identity=3567 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf subsys=endpoint level=info msg="Successful endpoint creation" containerID=caf41d1933 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2271 identity=3567 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-n48xf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1add30f1b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2176 identity=40717 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1add30f1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2176 identity=40717 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q5ljf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8778f46011 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2269 identity=11569 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n subsys=endpoint level=info msg="Successful endpoint creation" containerID=8778f46011 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2269 identity=11569 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pp94n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 a872affe-032f-4b28-8bd0-860842038997 default }" containerID=6bf859c66c67693cdeb22d66c42296798cc808857b7ff6cd7b0e8af3b0105c88 datapathConfiguration="&{false false false false false }" interface=lxc3076d312cc47 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bf859c66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bf859c66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bf859c66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=49501 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bf859c66c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=49501 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bf859c66c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=502 identity=49501 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bf859c66c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=49501 ipv4=10.0.0.75 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-66hq5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1892 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01892 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01892 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01892 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01892:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 e452777e-eddd-4e81-8f67-56defdbbb9cf default }" containerID=804f541a99763d4b485f1fe8464d830a7b956b4dc6519c26ee87c8c1f744faff datapathConfiguration="&{false false false false false }" interface=lxca88a4d2ececf k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=804f541a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=804f541a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=804f541a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=34276 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=804f541a99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=34276 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=804f541a99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=238 identity=34276 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=804f541a99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=34276 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=804f541a99 endpointID=238 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-p2rbn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=fdc34493-6cad-40ac-8b0d-adb12c1910bc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=804f541a99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=34276 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-p2rbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 97a69b90-a40c-480b-a807-1250b56c93d2 default }" containerID=de16aa2d4b20cc7dc52d4f233c01ed1d68ff04aefa9ac4c8797ed30eecb4f101 datapathConfiguration="&{false false false false false }" interface=lxcb220a677acf3 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 02e0827c-40f1-4eda-a8d6-5520137217fa default }" containerID=4833edeb031d758c0017786d860cf55d59bcfda644ba03de270154aff81a4374 datapathConfiguration="&{false false false false false }" interface=lxcc17115901c30 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=8267 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=8267 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=1507 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1702 identity=1507 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 d33bbb61-a148-4c43-b427-2862f9cad068 default }" containerID=f60d79ac4b6282345fb89bc168408ef13e6d3488e3a46dbba8c78fcf1e5766dc datapathConfiguration="&{false false false false false }" interface=lxca524757aa0df k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f60d79ac4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f60d79ac4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f60d79ac4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=42848 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f60d79ac4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2035 identity=42848 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de16aa2d4b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1528 identity=8267 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw subsys=endpoint level=info msg="Successful endpoint creation" containerID=de16aa2d4b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1528 identity=8267 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-sr7tw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4833edeb03 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1702 identity=1507 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=4833edeb03 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1702 identity=1507 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-fgxmf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f60d79ac4b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2035 identity=42848 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=f60d79ac4b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2035 identity=42848 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6b9df4cdf5-lvz8g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.37 b5c1ff93-8a63-4cdc-8ec3-9190b4fef9eb default }" containerID=2245336de5a8cee70f877e6c54a7470114059e6942e060e5a35380daa1e91529 datapathConfiguration="&{false false false false false }" interface=lxc0778a051f118 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2245336de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2245336de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2245336de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=22421 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2245336de5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2051 identity=22421 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2245336de5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2051 identity=22421 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2245336de5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2051 identity=22421 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2245336de5 endpointID=2051 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-nvzk2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=3e381bfc-ecfc-4045-b83a-a42e7f2854c6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=2245336de5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2051 identity=22421 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-nvzk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 478b1684-3950-4dc4-b724-bcab8e66a07f default }" containerID=6af6d8e3d003a72c54d8804a931dc1792e2a494281791db4cc855603f41ccbab datapathConfiguration="&{false false false false false }" interface=lxcd21103e4be89 k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6af6d8e3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6af6d8e3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6af6d8e3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6af6d8e3d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=32597 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6af6d8e3d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1042 identity=32597 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6af6d8e3d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1042 identity=32597 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 82cc4820-a5b5-48b3-ab1b-33bb3987f654 default }" containerID=f7f74168655fb42fa403177eb5a99a169f8c4524e48ff564ab51995cc8231c2e datapathConfiguration="&{false false false false false }" interface=lxcdd823c5fc0d2 k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f7416865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f7416865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7f7416865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f7416865 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2482 identity=32597 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f7416865 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2482 identity=32597 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f7416865 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2482 identity=32597 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=daemon level=info msg="Delete endpoint request" containerID=6af6d8e3d0 endpointID=1042 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6af6d8e3d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1042 identity=32597 ipv4=10.0.0.70 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-502d0820-e5f5-4cee-ab85-df48619851bc subsys=endpoint level=info msg="Delete endpoint request" containerID=f7f7416865 endpointID=2482 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f7f7416865 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2482 identity=32597 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3508082f-58e0-461b-b807-592c8fb46e29 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 cc71599a-05fd-4f60-b949-6f6539bbf4d2 default }" containerID=e84b5e5e4bcb8e06f9e5811e4a0a50d3a45effdf84b35e2a7c79f82cdfbcafff datapathConfiguration="&{false false false false false }" interface=lxcbbff57b5b3ac k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e84b5e5e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e84b5e5e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e84b5e5e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=24625 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e84b5e5e4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=24625 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.90 a0443b73-2851-40ab-856f-c1841d2c4a9a default }" containerID=ee36ca78f933b45fcd5d9517d57b8ca6a62152a3c1b3c9f279907a8987476ee0 datapathConfiguration="&{false false false false false }" interface=lxc86821b94aa9b k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee36ca78f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1091 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee36ca78f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1091 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee36ca78f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1091 identity=38805 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee36ca78f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1091 identity=38805 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee36ca78f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1091 identity=38805 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee36ca78f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1091 identity=38805 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-5c7rn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e84b5e5e4b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=44 identity=24625 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e84b5e5e4b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=44 identity=24625 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 06266629-1a36-40a7-8b24-1fe60c268840 default }" containerID=97461ad8d3c397862572828151b8ceb6320e16438a791765e6bcabbf479ae2ed datapathConfiguration="&{false false false false false }" interface=lxceea7f56f41b3 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97461ad8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97461ad8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97461ad8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=2182 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97461ad8d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1277 identity=2182 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 8acc52a2-fd23-4ae2-8187-c432122ab4fb default }" containerID=81807f930147b197e7c9857267f1dd33768b349ef7733f89b98cd50003a50b75 datapathConfiguration="&{false false false false false }" interface=lxc7d0681e26977 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81807f9301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81807f9301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81807f9301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=40729 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81807f9301 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2419 identity=40729 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 ef34b637-47cc-4169-a3f3-fc91e2646834 default }" containerID=d15161f416006d5f9cc3923496c9e5b11e5a3ba63bd63dd8c872d35fbc419f40 datapathConfiguration="&{false false false false false }" interface=lxc94e9e4bcf557 k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d15161f416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d15161f416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d15161f416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d15161f416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=32597 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97461ad8d3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1277 identity=2182 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97461ad8d3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1277 identity=2182 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 3b6fe803-a9ee-44d7-bbd6-c34647a108a0 default }" containerID=6ca4de687cfffc6539852a9ec326329718413adfcee8df4c6a0ff047a8c13bd6 datapathConfiguration="&{false false false false false }" interface=lxc1926e24f01c1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=81807f9301 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2419 identity=40729 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81807f9301 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2419 identity=40729 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d15161f416 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=860 identity=32597 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d15161f416 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=860 identity=32597 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=3585 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=133 identity=3585 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ca4de687c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=133 identity=3585 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ca4de687c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=133 identity=3585 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.81 08ca437c-1936-49b3-89b6-e9721e216787 default }" containerID=ff43316b7fca08b4eac4a8205e040cbe787a42a8e839b039b40a43afec9c2315 datapathConfiguration="&{false false false false false }" interface=lxcb173762f3890 k8sPodName=monitoring/vector-qp49p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff43316b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4073 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff43316b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4073 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff43316b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4073 identity=39716 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ff43316b7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4073 identity=39716 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff43316b7f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4073 identity=39716 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff43316b7f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4073 identity=39716 ipv4=10.0.0.81 ipv6= k8sPodName=monitoring/vector-qp49p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d15161f416 endpointID=860 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d15161f416 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=860 identity=32597 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e6e85f74-659a-489c-8396-a9da65f82c65 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 bb7f82eb-8ecf-423a-ab2d-9e3e40850430 default }" containerID=f24e0f9aa086401efb1c685b759615f744af7b0508fa61239f08146eba617b15 datapathConfiguration="&{false false false false false }" interface=lxc29e468f06688 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=28136 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=28136 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f24e0f9aa0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=164 identity=28136 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f24e0f9aa0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=164 identity=28136 ipv4=10.0.0.91 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 9914aa3d-e025-4e6f-b6b3-605e1c216217 default }" containerID=d36171a5fa8268fb7a3120900e383f16594d58e84b303e016bfc641749a6fb5e datapathConfiguration="&{false false false false false }" interface=lxc5501a26c9422 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d36171a5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d36171a5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d36171a5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=5332 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d36171a5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=122 identity=5332 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d36171a5fa datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=122 identity=5332 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d36171a5fa datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=122 identity=5332 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zfs6q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 e9f5c8b4-e30b-4ab9-a719-89c864ea66eb default }" containerID=759a87a3e914d375c518e4866a419841a2ea6b053300ade8db6bfb91574052e5 datapathConfiguration="&{false false false false false }" interface=lxcec3036aaa18d k8sPodName=openstack/memcached-memcached-6479589586-5jw4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=13883 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=13883 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=759a87a3e9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1947 identity=13883 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=759a87a3e9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1947 identity=13883 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-5jw4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 4e36c1a0-57ac-4a51-99af-03400fc387b3 default }" containerID=e2f9ec9fc774f654ddbedc56ebb030337fbf21e7f8ce70b6ef7589f135b5427b datapathConfiguration="&{false false false false false }" interface=lxc07c35bbba591 k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2f9ec9fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2f9ec9fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2f9ec9fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2f9ec9fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3141 identity=32597 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2f9ec9fc7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3141 identity=32597 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2f9ec9fc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3141 identity=32597 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=daemon level=info msg="Delete endpoint request" containerID=e2f9ec9fc7 endpointID=3141 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2f9ec9fc7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3141 identity=32597 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e646a604-a491-4ec8-b365-7eb8a43fe8fa subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 c5b4b4bb-faaa-480e-a94f-628449e9f0e8 default }" containerID=9eee8e9d58661259a9d484bf45e41479b87163e737e8643e51283ac81a9920b7 datapathConfiguration="&{false false false false false }" interface=lxcc5365e82926f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9eee8e9d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9eee8e9d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9eee8e9d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=57494 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9eee8e9d58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=787 identity=57494 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9eee8e9d58 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=787 identity=57494 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9eee8e9d58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=787 identity=57494 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 1f1456a3-9e6e-4111-bcfd-799750dcd521 default }" containerID=e7dd4631986efb1f74c39624e5a7e93c9be9130cc9f103edbbd900dbe3b3c602 datapathConfiguration="&{false false false false false }" interface=lxc772ed2553351 k8sPodName=openstack/keystone-api-5c44b8f74-pgmml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7dd463198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7dd463198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7dd463198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=16857 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7dd463198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=16857 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 c9aa55a4-5bce-4bb7-b5eb-3c87a53bd68e default }" containerID=ea7baae6f44f45abda67d2a744597aa29d3f0978cdba45d6a591bf53cb4f665c datapathConfiguration="&{false false false false false }" interface=lxc665ce9ff35fb k8sPodName=openstack/keystone-credential-setup-b6qgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea7baae6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea7baae6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea7baae6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=40287 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea7baae6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2632 identity=40287 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7dd463198 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2280 identity=16857 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7dd463198 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2280 identity=16857 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/keystone-api-5c44b8f74-pgmml subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ea7baae6f4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2632 identity=40287 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea7baae6f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=40287 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea7baae6f4 endpointID=2632 k8sNamespace=openstack k8sPodName=keystone-credential-setup-b6qgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=688a5012-9b60-4df9-aa81-703cf46997ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ea7baae6f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2632 identity=40287 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/keystone-credential-setup-b6qgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 a62b0d42-6c1c-49dd-84d2-2bbc10d2c832 default }" containerID=72f125343f682fa235b4c7401dc8f0e626fd267e1c2d9d4148316422f1cd5205 datapathConfiguration="&{false false false false false }" interface=lxc1bd396ee2091 k8sPodName=openstack/keystone-db-init-rq5bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72f125343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72f125343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72f125343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=27818 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=72f125343f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=27818 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72f125343f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3924 identity=27818 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=72f125343f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3924 identity=27818 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=daemon level=info msg="Delete endpoint request" containerID=72f125343f endpointID=3924 k8sNamespace=openstack k8sPodName=keystone-db-init-rq5bv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d4084d83-f756-4aa8-ab61-229e62a22552 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=72f125343f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3924 identity=27818 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-db-init-rq5bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 3ae403f1-eaac-496a-9809-6fe122fed1e7 default }" containerID=446b993ffc056dbe210804cb881c0c4540288628563b4a34d9c5769850d1777d datapathConfiguration="&{false false false false false }" interface=lxc0dfefa8bc90a k8sPodName=openstack/keystone-fernet-setup-b7g49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=446b993ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=446b993ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=446b993ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=3616 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=446b993ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=3616 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=446b993ffc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=500 identity=3616 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=446b993ffc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=500 identity=3616 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=446b993ffc endpointID=500 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-b7g49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=dd9380e7-32a6-4b86-96d0-cfa32dde4155 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=446b993ffc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=500 identity=3616 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-fernet-setup-b7g49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 0bb054f9-87dd-4f8a-aa3e-83a36d62bc55 default }" containerID=cfa600cd00425f4552b05fcfbf1c07b899c90d689052fcf13450f333997cae91 datapathConfiguration="&{false false false false false }" interface=lxc13911462f449 k8sPodName=openstack/keystone-db-sync-zljfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfa600cd00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfa600cd00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=13098d6f-b871-464b-b247-331b284cf81c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=13098d6f-b871-464b-b247-331b284cf81c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=13098d6f-b871-464b-b247-331b284cf81c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=13098d6f-b871-464b-b247-331b284cf81c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfa600cd00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identity=10699 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=13098d6f-b871-464b-b247-331b284cf81c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=13098d6f-b871-464b-b247-331b284cf81c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfa600cd00 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=800 identity=10699 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cfa600cd00 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=800 identity=10699 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfa600cd00 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=800 identity=10699 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfa600cd00 endpointID=800 k8sNamespace=openstack k8sPodName=keystone-db-sync-zljfh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=13098d6f-b871-464b-b247-331b284cf81c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=13098d6f-b871-464b-b247-331b284cf81c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cfa600cd00 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=800 identity=10699 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/keystone-db-sync-zljfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 acb8eb64-401f-442e-9612-ae7d7e43a32f default }" containerID=ca8ab7ed79cbc8ea380b235b06dbdd433332002c9ced2156b91ffa1ec129b28d datapathConfiguration="&{false false false false false }" interface=lxc56c727e1ddb5 k8sPodName=openstack/keystone-rabbit-init-vwkx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=34023 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=34023 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca8ab7ed79 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1775 identity=34023 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca8ab7ed79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1775 identity=34023 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca8ab7ed79 endpointID=1775 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vwkx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b7f71941-2b0b-4092-9a7e-b716c9e339cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ca8ab7ed79 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1775 identity=34023 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-rabbit-init-vwkx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 47300ef0-572b-44cf-a45e-24b411b79d4b default }" containerID=b3a8d43d9fecf7e1be5b97453089409e315faae6207878f3e8f3776e0d4180e4 datapathConfiguration="&{false false false false false }" interface=lxce7e9ac513532 k8sPodName=openstack/keystone-domain-manage-kqv2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3a8d43d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3a8d43d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3a8d43d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=54675 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3a8d43d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=54675 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3a8d43d9f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=512 identity=54675 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3a8d43d9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=512 identity=54675 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3a8d43d9f endpointID=512 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kqv2s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3008c021-4be8-48a9-a330-c7458d8a750d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b3a8d43d9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=512 identity=54675 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/keystone-domain-manage-kqv2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 e54c4a5e-be44-4622-9f04-f24a94bd6f9a default }" containerID=adaff13d316126dde4989ff40fc7734f21c088b0c382578d24b156eb1cd1505a datapathConfiguration="&{false false false false false }" interface=lxc68705953dfe5 k8sPodName=openstack/keystone-bootstrap-4lmlv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adaff13d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adaff13d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adaff13d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=61497 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adaff13d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1916 identity=61497 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=adaff13d31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1916 identity=61497 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=endpoint level=info msg="Successful endpoint creation" containerID=adaff13d31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1916 identity=61497 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=adaff13d31 endpointID=1916 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4lmlv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=46eaba0e-9f4b-49a6-993d-124d26b02251 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=adaff13d31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1916 identity=61497 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-bootstrap-4lmlv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 79b2dbf3-64ce-4a32-8713-539eb1f55d63 default }" containerID=ae6c5d09463ab82608649d0fac4be92087ae089f6046fce74d9afbab8d737cdb datapathConfiguration="&{false false false false false }" interface=lxc26434d5f9dda k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae6c5d0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae6c5d0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae6c5d0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae6c5d0946 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=32597 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae6c5d0946 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2116 identity=32597 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae6c5d0946 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2116 identity=32597 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=daemon level=info msg="Delete endpoint request" containerID=ae6c5d0946 endpointID=2116 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ae6c5d0946 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2116 identity=32597 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eb45a37e-7733-407c-96ab-f47bbc34c1fb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 d8d23aab-7e45-45b6-a50e-630b641f327c default }" containerID=ed723caf0b65e2a1edb3d087d77bab29cfd9f039ed62a349518f833d6fcf9a6b datapathConfiguration="&{false false false false false }" interface=lxcf380517df64e k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed723caf0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed723caf0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ed723caf0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=8513 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed723caf0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1006 identity=8513 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed723caf0b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1006 identity=8513 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed723caf0b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1006 identity=8513 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 00b85537-988b-49d5-a2de-1d6b139bc1e6 default }" containerID=d72be2eba4beb7f18b96af70efa43ebdf96ba462e5c12de653aabb9cb5687934 datapathConfiguration="&{false false false false false }" interface=lxcef7b197e1aca k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=32923 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=931 identity=32923 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 0d82157f-cd5f-4122-a40c-27da1dddbf67 default }" containerID=3ec0cd6b179ec32ac65686ee49bb7b1b92fa346548b5d2fe528959af05708c40 datapathConfiguration="&{false false false false false }" interface=lxc24d18fa1c90d k8sPodName=openstack/barbican-db-init-qnv62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ec0cd6b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ec0cd6b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ec0cd6b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=21701 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ec0cd6b17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1657 identity=21701 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d72be2eba4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=931 identity=32923 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d72be2eba4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=931 identity=32923 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-api-77d7b8b9d5-zbxcc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ec0cd6b17 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1657 identity=21701 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ec0cd6b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1657 identity=21701 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ec0cd6b17 endpointID=1657 k8sNamespace=openstack k8sPodName=barbican-db-init-qnv62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f15a9c73-14c6-4602-8c0f-872128d72f00 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3ec0cd6b17 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1657 identity=21701 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-db-init-qnv62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 190e4739-2410-4dbf-98c9-6c7a29e6e0e9 default }" containerID=2dc04ef2b5588574c68d4b00cf265fa568e4b3d1e42de8d13f855a658516be9f datapathConfiguration="&{false false false false false }" interface=lxc24839736a63d k8sPodName=openstack/barbican-db-sync-588fv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3798 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3798 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3798 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3798 identity=31012 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3798 identity=31012 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dc04ef2b5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3798 identity=31012 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dc04ef2b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3798 identity=31012 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2dc04ef2b5 endpointID=3798 k8sNamespace=openstack k8sPodName=barbican-db-sync-588fv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=e959f204-46ed-4e74-8c90-20481b0b4e4a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2dc04ef2b5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3798 identity=31012 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/barbican-db-sync-588fv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 2114adf8-46f1-4013-886e-68be5a279422 default }" containerID=bb875df81059b5a4c2e88ecfbc876818ef28e9d1aca176605c3bead3d4abbe19 datapathConfiguration="&{false false false false false }" interface=lxc0ba939004119 k8sPodName=openstack/barbican-rabbit-init-nrjx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb875df810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb875df810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bb875df810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=63320 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb875df810 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2967 identity=63320 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb875df810 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2967 identity=63320 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb875df810 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2967 identity=63320 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb875df810 endpointID=2967 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nrjx9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=803d7632-5130-4a8b-b1bd-b1853a599946 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bb875df810 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2967 identity=63320 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/barbican-rabbit-init-nrjx9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 063e054a-8eea-4032-a640-8c5a221bbb25 default }" containerID=85a6df0cc4b6ad9f5cdb13848d2a42b2215b93c0ed66ffbc88d00f650e9d727b datapathConfiguration="&{false false false false false }" interface=lxc27d66d4a1bc6 k8sPodName=openstack/barbican-ks-service-tptff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85a6df0cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85a6df0cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85a6df0cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=64472 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=85a6df0cc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=64472 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85a6df0cc4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=684 identity=64472 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=endpoint level=info msg="Successful endpoint creation" containerID=85a6df0cc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=684 identity=64472 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03574810285822501 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=85a6df0cc4 endpointID=684 k8sNamespace=openstack k8sPodName=barbican-ks-service-tptff subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=f5f31357-d121-499b-bd78-9eae6e1de3a7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=85a6df0cc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=684 identity=64472 ipv4=10.0.0.157 ipv6= k8sPodName=openstack/barbican-ks-service-tptff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 706e793c-b7f8-47e9-8513-eb36062a4bc6 default }" containerID=7d192d2c58e6dd6e73134757645ec4e18fd41a89057cd3c0c31c7e9b507aae8e datapathConfiguration="&{false false false false false }" interface=lxcfaf38305fe52 k8sPodName=openstack/barbican-ks-endpoints-h6mb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d192d2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d192d2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d192d2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=3994 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d192d2c58 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=3994 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7d192d2c58 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=117 identity=3994 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d192d2c58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=117 identity=3994 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d192d2c58 endpointID=117 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-h6mb6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=26705dba-7a64-4315-b62a-bcc6c8a17066 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7d192d2c58 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=117 identity=3994 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h6mb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 035fee36-8ac8-4075-aacb-45e7d3932a78 default }" containerID=ece9130b8dcebc99305f313a0ae1fb4ee46ff039f56d8c77d08bacd940cccf94 datapathConfiguration="&{false false false false false }" interface=lxc01ba17572082 k8sPodName=openstack/barbican-ks-user-x2vlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ece9130b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2818 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ece9130b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2818 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ece9130b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2818 identity=6783 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ece9130b8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2818 identity=6783 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ece9130b8d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2818 identity=6783 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ece9130b8d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2818 identity=6783 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ece9130b8d endpointID=2818 k8sNamespace=openstack k8sPodName=barbican-ks-user-x2vlc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=576791e9-417a-44fe-be3e-763f27e67e0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ece9130b8d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2818 identity=6783 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/barbican-ks-user-x2vlc subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.22 597038e5-346d-4dd7-850b-fbbc419609db default }" containerID=c5663987f716011b80486934c28c1ca1366d8f7068a57ac5f8520769ae97132a datapathConfiguration="&{false false false false false }" interface=lxc93b9cccf49ba k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c5663987f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c5663987f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c5663987f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=6710 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c5663987f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=6710 ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c5663987f7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3648 identity=6710 ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w subsys=endpoint level=info msg="Successful endpoint creation" containerID=c5663987f7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3648 identity=6710 ipv4=10.0.0.22 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-gz94w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 30cd8a7d-3354-45cb-a31f-3cff858ed985 default }" containerID=f56fb4aa54b6e5493367aa119de51445cdb977085cbfd3127710a562f8c52830 datapathConfiguration="&{false false false false false }" interface=lxc96bb6d79d363 k8sPodName=openstack/rook-ceph-detect-version-kxdlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f56fb4aa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f56fb4aa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f56fb4aa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=24575 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f56fb4aa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=24575 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f56fb4aa54 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=243 identity=24575 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f56fb4aa54 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=243 identity=24575 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f56fb4aa54 endpointID=243 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-kxdlp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=401b65f7-eaf9-4338-8e19-a46cbccfae34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=f56fb4aa54 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=243 identity=24575 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rook-ceph-detect-version-kxdlp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 c3e727f8-92d1-42ee-9276-bfd52e020173 default }" containerID=bfc702c037cc20f233b1e8321f17127604b4b5efd49392452f9cb1ee1cc5b170 datapathConfiguration="&{false false false false false }" interface=lxc55deafb15884 k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfc702c037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfc702c037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfc702c037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=32597 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfc702c037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1105 identity=32597 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfc702c037 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1105 identity=32597 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfc702c037 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1105 identity=32597 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 da5d50ef-d89b-4198-a081-b7c985ed6c49 default }" containerID=a8d277b894e41619013dfb27ac0661daa37e192ae13babc177823f69274a5907 datapathConfiguration="&{false false false false false }" interface=lxcf38a0285b769 k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8d277b894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8d277b894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a8d277b894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=5209 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8d277b894 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=5209 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8d277b894 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=207 identity=5209 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8d277b894 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=207 identity=5209 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=daemon level=info msg="Delete endpoint request" containerID=bfc702c037 endpointID=1105 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bfc702c037 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1105 identity=32597 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-945f75f7-abfa-42fd-956e-d9a5025bf43d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a8d277b894 endpointID=207 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-4jfvg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=16e58b4a-7ebd-44b0-b489-dd42d3fb809f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=a8d277b894 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=207 identity=5209 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-4jfvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 4e69fdfa-ea4a-477a-9b8a-48023e81460c default }" containerID=b0811f80ae15fd85a2659530db341147fda73cee250d6532147c94694fbccf40 datapathConfiguration="&{false false false false false }" interface=lxc91945a40674f k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b0811f80ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b0811f80ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b0811f80ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=24361 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b0811f80ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=756 identity=24361 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b0811f80ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=756 identity=24361 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b0811f80ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=756 identity=24361 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.69 3b0e1f2b-0308-401f-80ce-d9d7c225dfb9 default }" containerID=2826ee668d4f78f69bbb9d12679397f74fdc89dfdd0a7a4686b5195fce899023 datapathConfiguration="&{false false false false false }" interface=lxc131f10734ffe k8sPodName=openstack/glance-db-init-z5tzq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30672477-233e-4750-b451-76ab4d640d4c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=30672477-233e-4750-b451-76ab4d640d4c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30672477-233e-4750-b451-76ab4d640d4c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=30672477-233e-4750-b451-76ab4d640d4c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=9823 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30672477-233e-4750-b451-76ab4d640d4c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=30672477-233e-4750-b451-76ab4d640d4c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2563 identity=9823 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2826ee668d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2563 identity=9823 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2826ee668d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2563 identity=9823 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2826ee668d endpointID=2563 k8sNamespace=openstack k8sPodName=glance-db-init-z5tzq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30672477-233e-4750-b451-76ab4d640d4c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=30672477-233e-4750-b451-76ab4d640d4c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2826ee668d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2563 identity=9823 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-db-init-z5tzq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 5bba691e-e9e0-4a46-a091-7d1889b54a49 default }" containerID=60e17e59813fab365cc20ec7001ebc2b87d77378f83f690e8db86f295418ec37 datapathConfiguration="&{false false false false false }" interface=lxc076d2d4acb43 k8sPodName=openstack/glance-db-sync-5jjbn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e17e5981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e17e5981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e17e5981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=64999 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e17e5981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=306 identity=64999 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60e17e5981 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=306 identity=64999 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e17e5981 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=306 identity=64999 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60e17e5981 endpointID=306 k8sNamespace=openstack k8sPodName=glance-db-sync-5jjbn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=b12cb443-7d97-4305-b7fd-8b48061d1e76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=60e17e5981 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=306 identity=64999 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/glance-db-sync-5jjbn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 474b6c35-cd3e-4895-a900-77a5f66187c9 default }" containerID=1829965b4f53d50ce6aa6240e6596a9a2636513d728b575c1d757537fc4f0d49 datapathConfiguration="&{false false false false false }" interface=lxc227017301d5d k8sPodName=openstack/glance-rabbit-init-zhjrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1829965b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1829965b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1829965b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=17314 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1829965b4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=17314 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1829965b4f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=16 identity=17314 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1829965b4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=16 identity=17314 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1829965b4f endpointID=16 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zhjrf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d1ee4034-797e-4f1f-b6eb-de8a161f777c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1829965b4f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=16 identity=17314 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-rabbit-init-zhjrf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 e8243657-8321-46d1-a594-ee6ee17ad26d default }" containerID=3e84cd5f2d2b974da099c471b09f9df7040aecd80bcdca59f3283701906927e0 datapathConfiguration="&{false false false false false }" interface=lxc87289f4cfcb2 k8sPodName=openstack/glance-ks-service-m2q2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e84cd5f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e84cd5f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e84cd5f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=18066 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e84cd5f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=18066 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e84cd5f2d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1646 identity=18066 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e84cd5f2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1646 identity=18066 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 720abecd-20ca-4a8d-8139-79d308cabcbe default }" containerID=f8d72a89540103b2744343a972440ff475db11736ff2d5bf67caf31cbd54ed7d datapathConfiguration="&{false false false false false }" interface=lxc6b1a8d78b16e k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8d72a8954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8d72a8954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8d72a8954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=7991 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8d72a8954 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=7991 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 1253a1e0-2bd5-403c-bb97-b73ec3e989ee default }" containerID=6ef4a83392869a213097f207debcd995eca0543e135d3801cf6573cc53c78997 datapathConfiguration="&{false false false false false }" interface=lxcf235d1a425fa k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ef4a83392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ef4a83392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ef4a83392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=29552 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ef4a83392 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=29552 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8d72a8954 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1456 identity=7991 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8d72a8954 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1456 identity=7991 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-dprxr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6ef4a83392 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2641 identity=29552 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ef4a83392 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2641 identity=29552 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-4mndh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e84cd5f2d endpointID=1646 k8sNamespace=openstack k8sPodName=glance-ks-service-m2q2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=602c0676-f1e1-4c5d-a39c-a0b4f5748bb0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e84cd5f2d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1646 identity=18066 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-ks-service-m2q2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 21ebe86f-56df-4e91-9f5f-c4deb0caa622 default }" containerID=390fd2a8b76cc38f307ce150158de2d0afd8b544d2b70db9ccb0d26e467ca719 datapathConfiguration="&{false false false false false }" interface=lxc3d54df667c16 k8sPodName=openstack/glance-ks-endpoints-vr7hc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=390fd2a8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=390fd2a8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=91922364-742f-456e-a00d-4fa54ccae54a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=91922364-742f-456e-a00d-4fa54ccae54a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=91922364-742f-456e-a00d-4fa54ccae54a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=91922364-742f-456e-a00d-4fa54ccae54a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=390fd2a8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=35380 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=91922364-742f-456e-a00d-4fa54ccae54a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=91922364-742f-456e-a00d-4fa54ccae54a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=390fd2a8b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=35380 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=390fd2a8b7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=35380 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=endpoint level=info msg="Successful endpoint creation" containerID=390fd2a8b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=35380 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 79f3c155-4387-4a00-abc9-65f3c462157d default }" containerID=374b0bfa9fbf9cca69fc112c3effc9ff71a03327c341f0f8e2226be149c9d729 datapathConfiguration="&{false false false false false }" interface=lxc1cdb2c652b9b k8sPodName=openstack/ceph-object-controller-detect-version-vks7k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=21477 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=21477 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=374b0bfa9f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=442 identity=21477 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=endpoint level=info msg="Successful endpoint creation" containerID=374b0bfa9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=442 identity=21477 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=374b0bfa9f endpointID=442 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-vks7k subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0d5eaeb0-21c6-4962-a38c-f9c75f0d6c4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Delete endpoint request" containerID=390fd2a8b7 endpointID=755 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-vr7hc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=91922364-742f-456e-a00d-4fa54ccae54a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=91922364-742f-456e-a00d-4fa54ccae54a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=374b0bfa9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=442 identity=21477 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vks7k subsys=endpoint level=info msg="Removed endpoint" containerID=390fd2a8b7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=35380 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-ks-endpoints-vr7hc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 3735cbb6-a02d-4976-87f4-7debd5350b7c default }" containerID=3b45669f10df2206ea95fd58ae1475e81f8ad0b84e281680505d3f251d8949a2 datapathConfiguration="&{false false false false false }" interface=lxc8318865deec2 k8sPodName=openstack/glance-ks-user-bf8cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6d780bbf-a487-4562-9900-dd601eaec311,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6d780bbf-a487-4562-9900-dd601eaec311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6d780bbf-a487-4562-9900-dd601eaec311;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6d780bbf-a487-4562-9900-dd601eaec311;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=25868 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6d780bbf-a487-4562-9900-dd601eaec311,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6d780bbf-a487-4562-9900-dd601eaec311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=25868 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b45669f10 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1200 identity=25868 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b45669f10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1200 identity=25868 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b45669f10 endpointID=1200 k8sNamespace=openstack k8sPodName=glance-ks-user-bf8cc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6d780bbf-a487-4562-9900-dd601eaec311 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6d780bbf-a487-4562-9900-dd601eaec311 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3b45669f10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1200 identity=25868 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-ks-user-bf8cc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 84dc5c85-2718-454f-adff-a7d440e6a5dd default }" containerID=fffbaf485ae6be43844bbf812b5b9fb3e04744c801b654c1e6f0d93a6725c341 datapathConfiguration="&{false false false false false }" interface=lxc043d8718a944 k8sPodName=openstack/glance-metadefs-load-f8b7w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fffbaf485a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fffbaf485a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cf573e3-3142-4734-a383-54777f47416e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0cf573e3-3142-4734-a383-54777f47416e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0cf573e3-3142-4734-a383-54777f47416e;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=0cf573e3-3142-4734-a383-54777f47416e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fffbaf485a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=10528 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cf573e3-3142-4734-a383-54777f47416e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=0cf573e3-3142-4734-a383-54777f47416e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fffbaf485a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1262 identity=10528 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fffbaf485a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1262 identity=10528 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=endpoint level=info msg="Successful endpoint creation" containerID=fffbaf485a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1262 identity=10528 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fffbaf485a endpointID=1262 k8sNamespace=openstack k8sPodName=glance-metadefs-load-f8b7w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0cf573e3-3142-4734-a383-54777f47416e k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=0cf573e3-3142-4734-a383-54777f47416e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fffbaf485a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1262 identity=10528 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/glance-metadefs-load-f8b7w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 acc27014-93e0-4ea4-b619-e13ff5ce4663 default }" containerID=e2524d5f9c1da753a2579dec62c49888c5005d2ff8bf5d68998da463e0169409 datapathConfiguration="&{false false false false false }" interface=lxc0902d94c26e3 k8sPodName=openstack/glance-storage-init-xs4wg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=1163 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3676 identity=1163 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2524d5f9c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3676 identity=1163 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2524d5f9c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3676 identity=1163 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2524d5f9c endpointID=3676 k8sNamespace=openstack k8sPodName=glance-storage-init-xs4wg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=86e4b88f-c666-45d7-90e3-9f637ea4975a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e2524d5f9c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3676 identity=1163 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-storage-init-xs4wg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 6e03f105-cf20-4336-8928-96b1d2915dd4 default }" containerID=ea483d28dcb675f9dbf3d6c2225ee108c0f2f5522743db6488def69ff046ae4f datapathConfiguration="&{false false false false false }" interface=lxc12e787219b16 k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea483d28dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea483d28dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea483d28dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=8095 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea483d28dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3010 identity=8095 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea483d28dc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3010 identity=8095 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea483d28dc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3010 identity=8095 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/glance-api-7bc797b75d-cjxr6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 c804483d-4331-41a9-930c-1913f79657d1 default }" containerID=22f9394b5bb40e653867a62b8a875f1e991c86d590f19d7cf96726add94f6650 datapathConfiguration="&{false false false false false }" interface=lxce0bec8c5a459 k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.135 c4d2bafc-0018-4a2a-9d7c-36c7f7a9b1b1 default }" containerID=983f00d752d417c7145d54f5804c0cd971bb77fcec166625b5ab1a3bb5cf22a6 datapathConfiguration="&{false false false false false }" interface=lxca64de63ac765 k8sPodName=openstack/staffeln-api-587f8857b-r25xk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=29311 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=29311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=13004 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=13004 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 60eaa86a-f28e-4fd6-8af4-d3477d9c508e default }" containerID=fe920a6513cd73072c446a74dbd2b1302f43f18ea8ff4031e3d322f77209d87d datapathConfiguration="&{false false false false false }" interface=lxc057fffe198b0 k8sPodName=openstack/staffeln-db-init-vbd5x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe920a6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe920a6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe920a6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=8549 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe920a6513 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=8549 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22f9394b5b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=586 identity=29311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=22f9394b5b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=586 identity=29311 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/staffeln-conductor-f8bcc547-d6vbd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=983f00d752 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2968 identity=13004 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk subsys=endpoint level=info msg="Successful endpoint creation" containerID=983f00d752 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2968 identity=13004 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-587f8857b-r25xk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fe920a6513 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1182 identity=8549 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe920a6513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1182 identity=8549 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe920a6513 endpointID=1182 k8sNamespace=openstack k8sPodName=staffeln-db-init-vbd5x subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8d04398e-d7ef-4b78-949b-54caaa72776b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=fe920a6513 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1182 identity=8549 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/staffeln-db-init-vbd5x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 cfaa108e-0f34-4859-964d-c22f04b7a8fd default }" containerID=b5f203ccc4f0e8184d394f4ce9cbc222bdaad1d5149bb434d8a614ceba26f02c datapathConfiguration="&{false false false false false }" interface=lxc5573f249e023 k8sPodName=openstack/staffeln-db-sync-qlr7b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=3726 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=d00b35b6-74a4-4157-a3bd-dd361a7e3398,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1670 identity=3726 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5f203ccc4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1670 identity=3726 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5f203ccc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1670 identity=3726 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-sync-qlr7b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager