level=info msg="Memory available for map entries (0.003% of 16764952576B): 41912381B" subsys=config
level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config
level=info msg="option bpf-nat-global-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config
level=info msg="  --agent-health-port='9879'" subsys=daemon
level=info msg="  --agent-labels=''" subsys=daemon
level=info msg="  --agent-liveness-update-interval='1s'" subsys=daemon
level=info msg="  --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon
level=info msg="  --allocator-list-timeout='3m0s'" subsys=daemon
level=info msg="  --allow-icmp-frag-needed='true'" subsys=daemon
level=info msg="  --allow-localhost='auto'" subsys=daemon
level=info msg="  --annotate-k8s-node='false'" subsys=daemon
level=info msg="  --api-rate-limit=''" subsys=daemon
level=info msg="  --arping-refresh-period='30s'" subsys=daemon
level=info msg="  --auto-create-cilium-node-resource='true'" subsys=daemon
level=info msg="  --auto-direct-node-routes='false'" subsys=daemon
level=info msg="  --bgp-announce-lb-ip='false'" subsys=daemon
level=info msg="  --bgp-announce-pod-cidr='false'" subsys=daemon
level=info msg="  --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon
level=info msg="  --bpf-auth-map-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-global-any-max='262144'" subsys=daemon
level=info msg="  --bpf-ct-global-tcp-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon
level=info msg="  --bpf-filter-priority='1'" subsys=daemon
level=info msg="  --bpf-fragments-map-max='8192'" subsys=daemon
level=info msg="  --bpf-lb-acceleration='disabled'" subsys=daemon
level=info msg="  --bpf-lb-affinity-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-algorithm='random'" subsys=daemon
level=info msg="  --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon
level=info msg="  --bpf-lb-dsr-dispatch='opt'" subsys=daemon
level=info msg="  --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon
level=info msg="  --bpf-lb-external-clusterip='false'" subsys=daemon
level=info msg="  --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon
level=info msg="  --bpf-lb-maglev-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-maglev-table-size='16381'" subsys=daemon
level=info msg="  --bpf-lb-map-max='65536'" subsys=daemon
level=info msg="  --bpf-lb-mode='snat'" subsys=daemon
level=info msg="  --bpf-lb-rev-nat-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-service-backend-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-service-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-sock='false'" subsys=daemon
level=info msg="  --bpf-lb-sock-hostns-only='false'" subsys=daemon
level=info msg="  --bpf-lb-source-range-map-max='0'" subsys=daemon
level=info msg="  --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon
level=info msg="  --bpf-map-event-buffers=''" subsys=daemon
level=info msg="  --bpf-nat-global-max='524288'" subsys=daemon
level=info msg="  --bpf-neigh-global-max='524288'" subsys=daemon
level=info msg="  --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon
level=info msg="  --bpf-policy-map-max='16384'" subsys=daemon
level=info msg="  --bpf-root='/sys/fs/bpf'" subsys=daemon
level=info msg="  --bpf-sock-rev-map-max='262144'" subsys=daemon
level=info msg="  --bypass-ip-availability-upon-restore='false'" subsys=daemon
level=info msg="  --certificates-directory='/var/run/cilium/certs'" subsys=daemon
level=info msg="  --cflags=''" subsys=daemon
level=info msg="  --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon
level=info msg="  --cilium-endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --cluster-health-port='4240'" subsys=daemon
level=info msg="  --cluster-id='0'" subsys=daemon
level=info msg="  --cluster-name='default'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-mask-size='24'" subsys=daemon
level=info msg="  --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon
level=info msg="  --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon
level=info msg="  --cmdref=''" subsys=daemon
level=info msg="  --cni-chaining-mode='none'" subsys=daemon
level=info msg="  --cni-chaining-target=''" subsys=daemon
level=info msg="  --cni-exclusive='true'" subsys=daemon
level=info msg="  --cni-external-routing='false'" subsys=daemon
level=info msg="  --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon
level=info msg="  --cnp-node-status-gc-interval='0s'" subsys=daemon
level=info msg="  --config=''" subsys=daemon
level=info msg="  --config-dir='/tmp/cilium/config-map'" subsys=daemon
level=info msg="  --config-sources='config-map:kube-system/cilium-config'" subsys=daemon
level=info msg="  --conntrack-gc-interval='0s'" subsys=daemon
level=info msg="  --conntrack-gc-max-interval='0s'" subsys=daemon
level=info msg="  --crd-wait-timeout='5m0s'" subsys=daemon
level=info msg="  --custom-cni-conf='false'" subsys=daemon
level=info msg="  --datapath-mode='veth'" subsys=daemon
level=info msg="  --debug='false'" subsys=daemon
level=info msg="  --debug-verbose=''" subsys=daemon
level=info msg="  --derive-masquerade-ip-addr-from-device=''" subsys=daemon
level=info msg="  --devices=''" subsys=daemon
level=info msg="  --direct-routing-device=''" subsys=daemon
level=info msg="  --disable-cnp-status-updates='true'" subsys=daemon
level=info msg="  --disable-endpoint-crd='false'" subsys=daemon
level=info msg="  --disable-envoy-version-check='false'" subsys=daemon
level=info msg="  --disable-iptables-feeder-rules=''" subsys=daemon
level=info msg="  --dns-max-ips-per-restored-rule='1000'" subsys=daemon
level=info msg="  --dns-policy-unload-on-shutdown='false'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-limit='0'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon
level=info msg="  --dnsproxy-enable-transparent-mode='true'" subsys=daemon
level=info msg="  --dnsproxy-lock-count='128'" subsys=daemon
level=info msg="  --dnsproxy-lock-timeout='500ms'" subsys=daemon
level=info msg="  --egress-gateway-policy-map-max='16384'" subsys=daemon
level=info msg="  --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon
level=info msg="  --egress-masquerade-interfaces=''" subsys=daemon
level=info msg="  --egress-multi-home-ip-rule-compat='false'" subsys=daemon
level=info msg="  --enable-auto-protect-node-port-range='true'" subsys=daemon
level=info msg="  --enable-bandwidth-manager='false'" subsys=daemon
level=info msg="  --enable-bbr='false'" subsys=daemon
level=info msg="  --enable-bgp-control-plane='false'" subsys=daemon
level=info msg="  --enable-bpf-clock-probe='false'" subsys=daemon
level=info msg="  --enable-bpf-masquerade='false'" subsys=daemon
level=info msg="  --enable-bpf-tproxy='false'" subsys=daemon
level=info msg="  --enable-cilium-api-server-access='*'" subsys=daemon
level=info msg="  --enable-cilium-endpoint-slice='false'" subsys=daemon
level=info msg="  --enable-cilium-health-api-server-access='*'" subsys=daemon
level=info msg="  --enable-custom-calls='false'" subsys=daemon
level=info msg="  --enable-endpoint-health-checking='true'" subsys=daemon
level=info msg="  --enable-endpoint-routes='false'" subsys=daemon
level=info msg="  --enable-envoy-config='false'" subsys=daemon
level=info msg="  --enable-external-ips='false'" subsys=daemon
level=info msg="  --enable-health-check-nodeport='true'" subsys=daemon
level=info msg="  --enable-health-checking='true'" subsys=daemon
level=info msg="  --enable-high-scale-ipcache='false'" subsys=daemon
level=info msg="  --enable-host-firewall='false'" subsys=daemon
level=info msg="  --enable-host-legacy-routing='false'" subsys=daemon
level=info msg="  --enable-host-port='false'" subsys=daemon
level=info msg="  --enable-hubble='false'" subsys=daemon
level=info msg="  --enable-hubble-recorder-api='true'" subsys=daemon
level=info msg="  --enable-icmp-rules='true'" subsys=daemon
level=info msg="  --enable-identity-mark='true'" subsys=daemon
level=info msg="  --enable-ip-masq-agent='false'" subsys=daemon
level=info msg="  --enable-ipsec='false'" subsys=daemon
level=info msg="  --enable-ipsec-key-watcher='true'" subsys=daemon
level=info msg="  --enable-ipv4='true'" subsys=daemon
level=info msg="  --enable-ipv4-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv4-egress-gateway='false'" subsys=daemon
level=info msg="  --enable-ipv4-fragment-tracking='true'" subsys=daemon
level=info msg="  --enable-ipv4-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6='false'" subsys=daemon
level=info msg="  --enable-ipv6-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv6-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6-ndp='false'" subsys=daemon
level=info msg="  --enable-k8s='true'" subsys=daemon
level=info msg="  --enable-k8s-api-discovery='false'" subsys=daemon
level=info msg="  --enable-k8s-endpoint-slice='true'" subsys=daemon
level=info msg="  --enable-k8s-event-handover='false'" subsys=daemon
level=info msg="  --enable-k8s-networkpolicy='true'" subsys=daemon
level=info msg="  --enable-k8s-terminating-endpoint='true'" subsys=daemon
level=info msg="  --enable-l2-announcements='false'" subsys=daemon
level=info msg="  --enable-l2-neigh-discovery='true'" subsys=daemon
level=info msg="  --enable-l2-pod-announcements='false'" subsys=daemon
level=info msg="  --enable-l7-proxy='true'" subsys=daemon
level=info msg="  --enable-local-node-route='true'" subsys=daemon
level=info msg="  --enable-local-redirect-policy='false'" subsys=daemon
level=info msg="  --enable-mke='false'" subsys=daemon
level=info msg="  --enable-monitor='true'" subsys=daemon
level=info msg="  --enable-nat46x64-gateway='false'" subsys=daemon
level=info msg="  --enable-node-port='false'" subsys=daemon
level=info msg="  --enable-pmtu-discovery='false'" subsys=daemon
level=info msg="  --enable-policy='default'" subsys=daemon
level=info msg="  --enable-recorder='false'" subsys=daemon
level=info msg="  --enable-remote-node-identity='true'" subsys=daemon
level=info msg="  --enable-runtime-device-detection='false'" subsys=daemon
level=info msg="  --enable-sctp='false'" subsys=daemon
level=info msg="  --enable-service-topology='false'" subsys=daemon
level=info msg="  --enable-session-affinity='false'" subsys=daemon
level=info msg="  --enable-srv6='false'" subsys=daemon
level=info msg="  --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon
level=info msg="  --enable-svc-source-range-check='true'" subsys=daemon
level=info msg="  --enable-tracing='false'" subsys=daemon
level=info msg="  --enable-unreachable-routes='false'" subsys=daemon
level=info msg="  --enable-vtep='false'" subsys=daemon
level=info msg="  --enable-well-known-identities='false'" subsys=daemon
level=info msg="  --enable-wireguard='false'" subsys=daemon
level=info msg="  --enable-wireguard-userspace-fallback='false'" subsys=daemon
level=info msg="  --enable-xdp-prefilter='false'" subsys=daemon
level=info msg="  --enable-xt-socket-fallback='true'" subsys=daemon
level=info msg="  --encrypt-interface=''" subsys=daemon
level=info msg="  --encrypt-node='false'" subsys=daemon
level=info msg="  --endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --endpoint-queue-size='25'" subsys=daemon
level=info msg="  --endpoint-status=''" subsys=daemon
level=info msg="  --envoy-config-timeout='2m0s'" subsys=daemon
level=info msg="  --envoy-log=''" subsys=daemon
level=info msg="  --exclude-local-address=''" subsys=daemon
level=info msg="  --external-envoy-proxy='false'" subsys=daemon
level=info msg="  --fixed-identity-mapping=''" subsys=daemon
level=info msg="  --fqdn-regex-compile-lru-size='1024'" subsys=daemon
level=info msg="  --gops-port='9890'" subsys=daemon
level=info msg="  --http-403-msg=''" subsys=daemon
level=info msg="  --http-idle-timeout='0'" subsys=daemon
level=info msg="  --http-max-grpc-timeout='0'" subsys=daemon
level=info msg="  --http-normalize-path='true'" subsys=daemon
level=info msg="  --http-request-timeout='3600'" subsys=daemon
level=info msg="  --http-retry-count='3'" subsys=daemon
level=info msg="  --http-retry-timeout='0'" subsys=daemon
level=info msg="  --hubble-disable-tls='false'" subsys=daemon
level=info msg="  --hubble-event-buffer-capacity='4095'" subsys=daemon
level=info msg="  --hubble-event-queue-size='0'" subsys=daemon
level=info msg="  --hubble-export-file-compress='false'" subsys=daemon
level=info msg="  --hubble-export-file-max-backups='5'" subsys=daemon
level=info msg="  --hubble-export-file-max-size-mb='10'" subsys=daemon
level=info msg="  --hubble-export-file-path=''" subsys=daemon
level=info msg="  --hubble-listen-address=''" subsys=daemon
level=info msg="  --hubble-metrics=''" subsys=daemon
level=info msg="  --hubble-metrics-server=''" subsys=daemon
level=info msg="  --hubble-monitor-events=''" subsys=daemon
level=info msg="  --hubble-prefer-ipv6='false'" subsys=daemon
level=info msg="  --hubble-recorder-sink-queue-size='1024'" subsys=daemon
level=info msg="  --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon
level=info msg="  --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon
level=info msg="  --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon
level=info msg="  --hubble-tls-cert-file=''" subsys=daemon
level=info msg="  --hubble-tls-client-ca-files=''" subsys=daemon
level=info msg="  --hubble-tls-key-file=''" subsys=daemon
level=info msg="  --identity-allocation-mode='crd'" subsys=daemon
level=info msg="  --identity-change-grace-period='5s'" subsys=daemon
level=info msg="  --identity-gc-interval='15m0s'" subsys=daemon
level=info msg="  --identity-heartbeat-timeout='30m0s'" subsys=daemon
level=info msg="  --identity-restore-grace-period='10m0s'" subsys=daemon
level=info msg="  --install-egress-gateway-routes='false'" subsys=daemon
level=info msg="  --install-iptables-rules='true'" subsys=daemon
level=info msg="  --install-no-conntrack-iptables-rules='false'" subsys=daemon
level=info msg="  --ip-allocation-timeout='2m0s'" subsys=daemon
level=info msg="  --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon
level=info msg="  --ipam='cluster-pool'" subsys=daemon
level=info msg="  --ipam-cilium-node-update-rate='15s'" subsys=daemon
level=info msg="  --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon
level=info msg="  --ipsec-key-file=''" subsys=daemon
level=info msg="  --ipsec-key-rotation-duration='5m0s'" subsys=daemon
level=info msg="  --iptables-lock-timeout='5s'" subsys=daemon
level=info msg="  --iptables-random-fully='false'" subsys=daemon
level=info msg="  --ipv4-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv4-node='auto'" subsys=daemon
level=info msg="  --ipv4-pod-subnets=''" subsys=daemon
level=info msg="  --ipv4-range='auto'" subsys=daemon
level=info msg="  --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon
level=info msg="  --ipv4-service-range='auto'" subsys=daemon
level=info msg="  --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon
level=info msg="  --ipv6-mcast-device=''" subsys=daemon
level=info msg="  --ipv6-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv6-node='auto'" subsys=daemon
level=info msg="  --ipv6-pod-subnets=''" subsys=daemon
level=info msg="  --ipv6-range='auto'" subsys=daemon
level=info msg="  --ipv6-service-range='auto'" subsys=daemon
level=info msg="  --join-cluster='false'" subsys=daemon
level=info msg="  --k8s-api-server=''" subsys=daemon
level=info msg="  --k8s-client-burst='10'" subsys=daemon
level=info msg="  --k8s-client-qps='5'" subsys=daemon
level=info msg="  --k8s-heartbeat-timeout='30s'" subsys=daemon
level=info msg="  --k8s-kubeconfig-path=''" subsys=daemon
level=info msg="  --k8s-namespace='kube-system'" subsys=daemon
level=info msg="  --k8s-require-ipv4-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-require-ipv6-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-service-cache-size='128'" subsys=daemon
level=info msg="  --k8s-service-proxy-name=''" subsys=daemon
level=info msg="  --k8s-sync-timeout='3m0s'" subsys=daemon
level=info msg="  --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon
level=info msg="  --keep-config='false'" subsys=daemon
level=info msg="  --kube-proxy-replacement='disabled'" subsys=daemon
level=info msg="  --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon
level=info msg="  --kvstore=''" subsys=daemon
level=info msg="  --kvstore-connectivity-timeout='2m0s'" subsys=daemon
level=info msg="  --kvstore-lease-ttl='15m0s'" subsys=daemon
level=info msg="  --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon
level=info msg="  --kvstore-opt=''" subsys=daemon
level=info msg="  --kvstore-periodic-sync='5m0s'" subsys=daemon
level=info msg="  --l2-announcements-lease-duration='15s'" subsys=daemon
level=info msg="  --l2-announcements-renew-deadline='5s'" subsys=daemon
level=info msg="  --l2-announcements-retry-period='2s'" subsys=daemon
level=info msg="  --l2-pod-announcements-interface=''" subsys=daemon
level=info msg="  --label-prefix-file=''" subsys=daemon
level=info msg="  --labels=''" subsys=daemon
level=info msg="  --lib-dir='/var/lib/cilium'" subsys=daemon
level=info msg="  --local-max-addr-scope='252'" subsys=daemon
level=info msg="  --local-router-ipv4=''" subsys=daemon
level=info msg="  --local-router-ipv6=''" subsys=daemon
level=info msg="  --log-driver=''" subsys=daemon
level=info msg="  --log-opt=''" subsys=daemon
level=info msg="  --log-system-load='false'" subsys=daemon
level=info msg="  --max-controller-interval='0'" subsys=daemon
level=info msg="  --mesh-auth-enabled='true'" subsys=daemon
level=info msg="  --mesh-auth-gc-interval='5m0s'" subsys=daemon
level=info msg="  --mesh-auth-mutual-listener-port='0'" subsys=daemon
level=info msg="  --mesh-auth-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-signal-backoff-duration='1s'" subsys=daemon
level=info msg="  --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon
level=info msg="  --mesh-auth-spire-admin-socket=''" subsys=daemon
level=info msg="  --metrics=''" subsys=daemon
level=info msg="  --mke-cgroup-mount=''" subsys=daemon
level=info msg="  --monitor-aggregation='medium'" subsys=daemon
level=info msg="  --monitor-aggregation-flags='all'" subsys=daemon
level=info msg="  --monitor-aggregation-interval='5s'" subsys=daemon
level=info msg="  --monitor-queue-size='0'" subsys=daemon
level=info msg="  --mtu='0'" subsys=daemon
level=info msg="  --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon
level=info msg="  --node-port-acceleration='disabled'" subsys=daemon
level=info msg="  --node-port-algorithm='random'" subsys=daemon
level=info msg="  --node-port-bind-protection='true'" subsys=daemon
level=info msg="  --node-port-mode='snat'" subsys=daemon
level=info msg="  --node-port-range='30000,32767'" subsys=daemon
level=info msg="  --nodes-gc-interval='5m0s'" subsys=daemon
level=info msg="  --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon
level=info msg="  --policy-audit-mode='false'" subsys=daemon
level=info msg="  --policy-queue-size='100'" subsys=daemon
level=info msg="  --policy-trigger-interval='1s'" subsys=daemon
level=info msg="  --pprof='false'" subsys=daemon
level=info msg="  --pprof-address='localhost'" subsys=daemon
level=info msg="  --pprof-port='6060'" subsys=daemon
level=info msg="  --preallocate-bpf-maps='false'" subsys=daemon
level=info msg="  --prepend-iptables-chains='true'" subsys=daemon
level=info msg="  --procfs='/host/proc'" subsys=daemon
level=info msg="  --prometheus-serve-addr=':9962'" subsys=daemon
level=info msg="  --proxy-connect-timeout='2'" subsys=daemon
level=info msg="  --proxy-gid='1337'" subsys=daemon
level=info msg="  --proxy-idle-timeout-seconds='60'" subsys=daemon
level=info msg="  --proxy-max-connection-duration-seconds='0'" subsys=daemon
level=info msg="  --proxy-max-requests-per-connection='0'" subsys=daemon
level=info msg="  --proxy-prometheus-port='9964'" subsys=daemon
level=info msg="  --read-cni-conf=''" subsys=daemon
level=info msg="  --remove-cilium-node-taints='true'" subsys=daemon
level=info msg="  --restore='true'" subsys=daemon
level=info msg="  --route-metric='0'" subsys=daemon
level=info msg="  --routing-mode='tunnel'" subsys=daemon
level=info msg="  --set-cilium-is-up-condition='true'" subsys=daemon
level=info msg="  --set-cilium-node-taints='true'" subsys=daemon
level=info msg="  --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon
level=info msg="  --single-cluster-route='false'" subsys=daemon
level=info msg="  --skip-cnp-status-startup-clean='false'" subsys=daemon
level=info msg="  --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon
level=info msg="  --srv6-encap-mode='reduced'" subsys=daemon
level=info msg="  --state-dir='/var/run/cilium'" subsys=daemon
level=info msg="  --synchronize-k8s-nodes='true'" subsys=daemon
level=info msg="  --tofqdns-dns-reject-response-code='refused'" subsys=daemon
level=info msg="  --tofqdns-enable-dns-compression='true'" subsys=daemon
level=info msg="  --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon
level=info msg="  --tofqdns-idle-connection-grace-period='0s'" subsys=daemon
level=info msg="  --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon
level=info msg="  --tofqdns-min-ttl='0'" subsys=daemon
level=info msg="  --tofqdns-pre-cache=''" subsys=daemon
level=info msg="  --tofqdns-proxy-port='0'" subsys=daemon
level=info msg="  --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon
level=info msg="  --trace-payloadlen='128'" subsys=daemon
level=info msg="  --trace-sock='true'" subsys=daemon
level=info msg="  --tunnel=''" subsys=daemon
level=info msg="  --tunnel-port='6082'" subsys=daemon
level=info msg="  --tunnel-protocol='geneve'" subsys=daemon
level=info msg="  --unmanaged-pod-watcher-interval='15'" subsys=daemon
level=info msg="  --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon
level=info msg="  --version='false'" subsys=daemon
level=info msg="  --vlan-bpf-bypass=''" subsys=daemon
level=info msg="  --vtep-cidr=''" subsys=daemon
level=info msg="  --vtep-endpoint=''" subsys=daemon
level=info msg="  --vtep-mac=''" subsys=daemon
level=info msg="  --vtep-mask=''" subsys=daemon
level=info msg="  --wireguard-encapsulate='false'" subsys=daemon
level=info msg="  --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon
level=info msg="     _ _ _" subsys=daemon
level=info msg=" ___|_| |_|_ _ _____" subsys=daemon
level=info msg="|  _| | | | | |     |" subsys=daemon
level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon
level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon
level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath
level=info msg="linking environment: OK!" subsys=linux-datapath
level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes
level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf
level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups
level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter
level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter
level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter
level=info msg=" - reserved:.*" subsys=labels-filter
level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter
level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter
level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:io\\.kubernetes" subsys=labels-filter
level=info msg=" - !:kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:k8s\\.io" subsys=labels-filter
level=info msg=" - !:pod-template-generation" subsys=labels-filter
level=info msg=" - !:pod-template-hash" subsys=labels-filter
level=info msg=" - !:controller-revision-hash" subsys=labels-filter
level=info msg=" - !:annotation.*" subsys=labels-filter
level=info msg=" - !:etcd_node" subsys=labels-filter
level=info msg=Invoked duration=1.027234ms function="pprof.glob..func1 (cell.go:50)" subsys=hive
level=info msg=Invoked duration="51.682µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive
level=info msg=Invoked duration="928.462µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive
level=info msg=Invoked duration="7.23µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive
level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate
level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth
level=info msg=Invoked duration=96.451432ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive
level=info msg=Invoked duration="14.64µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive
level=info msg=Invoked duration="20.22µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive
level=info msg=Invoked duration="118.984µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive
level=info msg=Invoked duration="68.152µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive
level=info msg=Invoked duration="80.022µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive
level=info msg=Starting subsys=hive
level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops
level=info msg="Start hook executed" duration="522.478µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive
level=info msg="Start hook executed" duration="7.87µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive
level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client
level=info msg="Serving prometheus metrics on :9962" subsys=metrics
level=info msg="Connected to apiserver" subsys=k8s-client
level=info msg="Start hook executed" duration=10.585128ms function="client.(*compositeClientset).onStart" subsys=hive
level=info msg="Start hook executed" duration=6.66406ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive
level=info msg="Start hook executed" duration="34.692µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="39.241µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive
level=info msg="Start hook executed" duration="252.128µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="160.765µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive
level=info msg="Start hook executed" duration="61.032µs" function="*cni.cniConfigManager.Start" subsys=hive
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Start hook executed" duration=50.644266ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive
level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath
level=info msg="Start hook executed" duration="77.593µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive
level=info msg="Start hook executed" duration="9.471µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive
level=info msg="Start hook executed" duration="3.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive
level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.35.0.0/16
level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog
level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s
level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog
level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s
level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog
level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s
level=warning msg="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=klog
level=error msg=k8sError error="github.com/cilium/cilium/pkg/k8s/resource/resource.go:305: Failed to watch *v2.CiliumNode: failed to list *v2.CiliumNode: the server could not find the requested resource (get ciliumnodes.cilium.io)" subsys=k8s
level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon
level=info msg="Start hook executed" duration=21.703384023s function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive
level=info msg="Start hook executed" duration="3.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration=100.22054ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s
level=info msg="Start hook executed" duration=100.805999ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Start hook executed" duration="3.711µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive
level=info msg="Start hook executed" duration="1.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive
level=info msg="Start hook executed" duration="151.775µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="3.53µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive
level=info msg="Start hook executed" duration="21.32µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive
level=info msg="Start hook executed" duration="22.221µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive
level=info msg="Start hook executed" duration="64.702µs" function="*manager.manager.Start" subsys=hive
level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent
level=info msg="Start hook executed" duration="297.48µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive
level=info msg="Start hook executed" duration="3.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="8.09µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="226.437µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive
level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager
level=info msg="Start hook executed" duration="489.997µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive
level=info msg="Datapath signal listener running" subsys=signal
level=info msg="Start hook executed" duration=1.105178ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive
level=info msg="Start hook executed" duration="6.38µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive
level=info msg="Start hook executed" duration="29.921µs" function="*job.group.Start" subsys=hive
level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon
level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon
level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.35 mtu=1500 subsys=mtu
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf
level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service
level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service
level=info msg="Reading old endpoints..." subsys=daemon
level=info msg="No old endpoints found." subsys=daemon
level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s
level=info msg="All Cilium CRDs have been found and are available" subsys=k8s
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery
level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.35 ipAddr.ipv6="<nil>" k8sNodeIP=199.19.213.35 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon
level=info msg="Detected devices" devices="[]" subsys=linux-datapath
level=info msg="Enabling k8s event listener" subsys=k8s-watcher
level=info msg="Removing stale endpoint interfaces" subsys=daemon
level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher
level=info msg="Skipping kvstore configuration" subsys=daemon
level=info msg="Initializing node addressing" subsys=daemon
level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="Restoring endpoints..." subsys=daemon
level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon
level=info msg="Addressing information:" subsys=daemon
level=info msg="  Cluster-Name: default" subsys=daemon
level=info msg="  Cluster-ID: 0" subsys=daemon
level=info msg="  Local node-name: instance" subsys=daemon
level=info msg="  Node-IPv6: <nil>" subsys=daemon
level=info msg="  External-Node IPv4: 199.19.213.35" subsys=daemon
level=info msg="  Internal-Node IPv4: 10.0.0.116" subsys=daemon
level=info msg="  IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon
level=info msg="  Loopback IPv4: 169.254.42.1" subsys=daemon
level=info msg="  Local IPv4 addresses:" subsys=daemon
level=info msg="  - 199.19.213.35" subsys=daemon
level=info msg="  - 172.17.0.100" subsys=daemon
level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager
level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.35} {CiliumInternalIP 10.0.0.116}] 10.0.0.0/24 [] <nil> [] 10.0.0.39 <nil> <nil> <nil> 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher
level=info msg="Initializing identity allocator" subsys=identity-cache
level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0
level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="<nil>" subsys=datapath-loader
level=info msg="Iptables rules installed" subsys=iptables
level=info msg="Adding new proxy port rules for cilium-dns-egress:45295" id=cilium-dns-egress subsys=proxy
level=info msg="Iptables proxy rules installed" subsys=iptables
level=info msg="Start hook executed" duration=2.376853966s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive
level=info msg="Starting IP identity watcher" subsys=ipcache
level=info msg="Initializing daemon" subsys=daemon
level=info msg="Validating configured node address ranges" subsys=daemon
level=info msg="Starting connection tracking garbage collector" subsys=daemon
level=info msg="Initial scan of connection tracking completed" subsys=ct-gc
level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon
level=info msg="Start hook executed" duration=1.595484ms function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive
level=info msg="Start hook executed" duration="9.1µs" function="*job.group.Start" subsys=hive
level=info msg="Creating host endpoint" subsys=daemon
level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0
level=info msg="Start hook executed" duration="31.071µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive
level=info msg="Start hook executed" duration="5.57µs" function="*job.group.Start" subsys=hive
level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1663 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Launching Cilium health daemon" subsys=daemon
level=info msg="Launching Cilium health endpoint" subsys=daemon
level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon
level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon
level=info msg="processing 0 queued deletion requests" subsys=daemon
level=info msg="Initializing Cilium API" subsys=daemon
level=info msg="Daemon initialization completed" bootstrapTime=24.917798604s subsys=daemon
level=info msg="Hubble server is disabled" subsys=hubble
level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.143 d39b70e7-a365-4034-a0bb-e10ae60aa7e6 default   }" containerID=1953702a8f4ecc6e9a14fd08378ed343e7c085384f9c4e20c7aab84c946e0f18 datapathConfiguration="&{false false false false false <nil>}" interface=lxc1f491f82730d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1953702a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1953702a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=1953702a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=25480 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1953702a8f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=708 identity=25480 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.213 2c9fc620-cbf4-4302-9e3c-db3a632f6de7 default   }" containerID=2a8beb04e631d5b7dde6bc3ce98e54b3f2cc0651413353af8a47b086c9b2347a datapathConfiguration="&{false false false false false <nil>}" interface=lxcc35518eaea52 k8sPodName=kube-system/coredns-7c96b6546b-gpw9j labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2a8beb04e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2a8beb04e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2a8beb04e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=46947 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=2a8beb04e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2360 identity=46947 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=endpoint
level=info msg="Compiled new BPF template" BPFCompilationTime=351.26231ms file-path=/var/run/cilium/state/templates/a5f60299e3c8e4b86bf5e6c41e2294e04928746afd5a8cc2c8717d4a86e32332/bpf_host.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1663 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 ipv4=10.0.0.39 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identityLabels="reserved:health" ipv4=10.0.0.39 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3589 identity=4 identityLabels="reserved:health" ipv4=10.0.0.39 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Compiled new BPF template" BPFCompilationTime=1.186783114s file-path=/var/run/cilium/state/templates/7d530fd23ec5c61702f04857b9c7a40cc8fe8c1fefa6f890249a3d795d5f7a9b/bpf_lxc.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID=2a8beb04e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2360 identity=46947 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2a8beb04e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2360 identity=46947 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=1953702a8f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=708 identity=25480 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1953702a8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=708 identity=25480 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3589 identity=4 ipv4=10.0.0.39 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=1953702a8f endpointID=708 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-6px9c subsys=daemon
level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=2bd3d121-753e-4845-87f0-724451a0fe66 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator
level=info msg="Removed endpoint" containerID=1953702a8f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=708 identity=25480 ipv4=10.0.0.143 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-6px9c subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.132 c45cb4f2-6923-4b82-959f-a48d0cbcdfe4 default   }" containerID=3f575ea11726368167d39a1cc1a601951ca68e16edd5ebd6dc6937c8336fb1ed datapathConfiguration="&{false false false false false <nil>}" interface=lxcd6d16f83a483 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identity=4172 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3477 identity=4172 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3f575ea117 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3477 identity=4172 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3f575ea117 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3477 identity=4172 ipv4=10.0.0.132 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5gpkd subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1663 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01663 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01663 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01663 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01663:pending" subsys=bpf
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1663 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.171 ce90da80-7b2f-44b5-b2cd-8f1657f05e8d default   }" containerID=8d54f95319a7afca3c2cc03b93206ab1b9d2ec331ea5d497f3f3a4f9950972b8 datapathConfiguration="&{false false false false false <nil>}" interface=lxca122b345f9b8 k8sPodName=kube-system/coredns-67659f764b-ghjtj labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8d54f95319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8d54f95319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=8d54f95319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=46947 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8d54f95319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=46947 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=8d54f95319 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=822 identity=46947 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8d54f95319 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=822 identity=46947 ipv4=10.0.0.171 ipv6= k8sPodName=kube-system/coredns-67659f764b-ghjtj subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.2 6d2e69e4-cef6-40bd-8116-0e3805dd7921 default   }" containerID=83e33786b1eebc3dc226c0253001a92ebc4eef7a0b5f20a0774ce132f6ca1b43 datapathConfiguration="&{false false false false false <nil>}" interface=lxc60ec8263170f k8sPodName=kube-system/coredns-67659f764b-khjcj labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=83e33786b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=83e33786b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=83e33786b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=46947 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=83e33786b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2817 identity=46947 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=83e33786b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2817 identity=46947 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj subsys=endpoint
level=info msg="Successful endpoint creation" containerID=83e33786b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2817 identity=46947 ipv4=10.0.0.2 ipv6= k8sPodName=kube-system/coredns-67659f764b-khjcj subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.183 6ef002b8-89b9-496e-9fd7-26b8f6d8180d default   }" containerID=27eb0a9797624900be74db338147494b4f8ec543b63ca2b2c749cf37a8415814 datapathConfiguration="&{false false false false false <nil>}" interface=lxcbdd2deec0337 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=27eb0a9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=27eb0a9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=27eb0a9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=41383 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=27eb0a9797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3432 identity=41383 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=27eb0a9797 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3432 identity=41383 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz subsys=endpoint
level=info msg="Successful endpoint creation" containerID=27eb0a9797 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3432 identity=41383 ipv4=10.0.0.183 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-qdlxz subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=2a8beb04e6 endpointID=2360 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-gpw9j subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator
level=info msg="Removed endpoint" containerID=2a8beb04e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2360 identity=46947 ipv4=10.0.0.213 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-gpw9j subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.78 265545a5-8d6d-4671-9c69-7df531594bf7 default   }" containerID=01efc2a84c8fdc0a68ccf8109b7d69c29bfc0aa0de549f58abc7db9f59168c71 datapathConfiguration="&{false false false false false <nil>}" interface=lxc7530d5c4db2d k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Invalid state transition skipped" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n line=611 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=37098 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1310 identity=37098 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.196 b7248cf9-e04a-45d4-91d1-62bf87afb3d9 default   }" containerID=30a3b424c0940eaa47f4ea3a96b9c0ec338e0e9597d011c8cd7c0e6461a08ebd datapathConfiguration="&{false false false false false <nil>}" interface=lxc8da4b740be51 k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=30a3b424c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=30a3b424c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.74 91d957f6-8e3f-4729-b65b-4df918f107ff default   }" containerID=e3d694c013d97a6d3486fa76880bce97c834e45f795708bc8963e564bba71b53 datapathConfiguration="&{false false false false false <nil>}" interface=lxcb3dacd09e236 k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e3d694c013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e3d694c013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=30a3b424c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=1925 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk oldIdentity="no identity" subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Waiting for endpoint to be generated" containerID=30a3b424c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=407 identity=1925 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.15.5;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e3d694c013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=3406 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e3d694c013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1902 identity=3406 ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=01efc2a84c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1310 identity=37098 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n subsys=endpoint
level=info msg="Successful endpoint creation" containerID=01efc2a84c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1310 identity=37098 ipv4=10.0.0.78 ipv6= k8sPodName=cert-manager/cert-manager-79c48d47db-hfz9n subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=e3d694c013 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1902 identity=3406 ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e3d694c013 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1902 identity=3406 ipv4=10.0.0.74 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-579c9dd7cd-nkjn5 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=30a3b424c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=407 identity=1925 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=30a3b424c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=407 identity=1925 ipv4=10.0.0.196 ipv6= k8sPodName=cert-manager/cert-manager-webhook-7d6b59cfdc-m5rgk subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.239 d2589001-e736-4751-87f2-2e23724f2cc4 default   }" containerID=613cd9c1a5f1a8d5e7448845a1450e4ec5be46485d7fbf7f98f9a26dc3bccb6e datapathConfiguration="&{false false false false false <nil>}" interface=lxc0c5a8eb8c39e k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=613cd9c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=613cd9c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.15.5;k8s:batch.kubernetes.io/controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa;k8s:helm.sh/chart=cert-manager-v1.15.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=613cd9c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=18839 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.15.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa,k8s:helm.sh/chart=cert-manager-v1.15.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=613cd9c1a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1727 identity=18839 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=613cd9c1a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1727 identity=18839 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=613cd9c1a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1727 identity=18839 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=613cd9c1a5 endpointID=1727 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-7n9bb subsys=daemon
level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.15.5 k8s:batch.kubernetes.io/controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=8a852769-6c71-44b5-9238-14a3c0b4a9aa k8s:helm.sh/chart=cert-manager-v1.15.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator
level=info msg="Removed endpoint" containerID=613cd9c1a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1727 identity=18839 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-7n9bb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.227 56f38eeb-58a5-4f02-8d16-1274bbbc8835 default   }" containerID=53133d413ec160e49f84b1862decfc0d6a93bfea9d863742c88dc56c22707522 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc8a8a8cb8d66 k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=53133d413e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=53133d413e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=53133d413e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=37447 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=53133d413e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=37447 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=53133d413e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=90 identity=37447 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=endpoint
level=info msg="Successful endpoint creation" containerID=53133d413e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=37447 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=daemon
level=info msg="Delete endpoint request" containerID=53133d413e endpointID=90 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-dv9vc subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=6e5f3b33-0e72-44c7-9025-8c0623b0b8c3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator
level=info msg="Removed endpoint" containerID=53133d413e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=90 identity=37447 ipv4=10.0.0.227 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-dv9vc subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.19 7ca689a7-8287-45c3-8441-ca45d310f50b default   }" containerID=b4ad6e5b4dc4ad00d2f98c535c2e38ad64c1b2f9f5333e3ca2ec84a8f81c24a5 datapathConfiguration="&{false false false false false <nil>}" interface=lxc26d47c8c6400 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b4ad6e5b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4016 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b4ad6e5b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4016 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b4ad6e5b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4016 identity=5413 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b4ad6e5b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4016 identity=5413 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b4ad6e5b4d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4016 identity=5413 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b4ad6e5b4d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4016 identity=5413 ipv4=10.0.0.19 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fwv9v subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.112 dcb842dc-f386-4015-9a17-cab26d16deda default   }" containerID=b2d8c7a610f91f9633538222d3244c370f83a3f3150ed4b9cd9977f22575ad43 datapathConfiguration="&{false false false false false <nil>}" interface=lxc28f606184e17 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b2d8c7a610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b2d8c7a610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b2d8c7a610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=17453 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b2d8c7a610 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=17453 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=b2d8c7a610 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=221 identity=17453 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b2d8c7a610 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=17453 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=b2d8c7a610 endpointID=221 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-tdwhq subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ee660a43-c85c-4684-a8f8-def412c263a6 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator
level=info msg="Removed endpoint" containerID=b2d8c7a610 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=221 identity=17453 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-tdwhq subsys=endpoint
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=99ad494c-798c-4863-a8bd-5054643a7759] Description:}]" policyAddRequest=d5202bc1-5bc4-4eb3-b0c9-09f4cefbeb61 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=d5202bc1-5bc4-4eb3-b0c9-09f4cefbeb61 policyRevision=2 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8e748e26-b9a3-4219-a7a4-86a4f1dc93f2] Description:}]" policyAddRequest=43c2fde8-5807-4680-a1d0-32b6dd2971e5 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=43c2fde8-5807-4680-a1d0-32b6dd2971e5 policyRevision=3 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.197 683c2c90-aaa5-4494-bc76-42538aa1c5e6 default   }" containerID=ba4b6c2c26027a7ff17c3f22b569695cfa21fdc91358d6273a2a327d04b44e48 datapathConfiguration="&{false false false false false <nil>}" interface=lxc48856957b706 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.66 5ebc717d-92c0-4c88-9eab-c05bdcfb977f default   }" containerID=2734382f0693dd180bb47c9c6cb5150e30eb265bdcc14591d4a4158178c3e465 datapathConfiguration="&{false false false false false <nil>}" interface=lxcdfb61101817b k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 line=611 subsys=endpoint
level=info msg="Invalid state transition skipped" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=44484 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=44484 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=16062 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3648 identity=16062 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=ba4b6c2c26 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=466 identity=44484 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=ba4b6c2c26 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=466 identity=44484 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dv5z2 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=2734382f06 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3648 identity=16062 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2734382f06 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3648 identity=16062 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fllsk subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.118 b2c7a71e-437f-4bbf-8d14-655edc92b9f1 default   }" containerID=a8c748fb4753f130669eb1d1628fb255bbc467907a76ccec4e2966bf9108f14a datapathConfiguration="&{false false false false false <nil>}" interface=lxcb8b6befaeb81 k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identity=4543 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2367 identity=4543 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=a8c748fb47 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2367 identity=4543 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a8c748fb47 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2367 identity=4543 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-8wkpp subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.61 bbd947dd-955b-4538-ab76-f1462a189074 default   }" containerID=4601443b5031a7bb79ee42f1b3120993e73be57c1b85a8d003a426d6783ae598 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8446d9d3dc84 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2912 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2912 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2912 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2912 identity=6905 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2912 identity=6905 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4601443b50 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2912 identity=6905 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4601443b50 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2912 identity=6905 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.184 1adf6f54-1fdf-4792-8dc5-f8ae9252b15d default   }" containerID=36ed2bc81847c850f9f0ad4942695d14cbc41cd1e33349bb2654a2c502d0f9c7 datapathConfiguration="&{false false false false false <nil>}" interface=lxca61afc370763 k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=36ed2bc818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=36ed2bc818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=36ed2bc818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=21698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=36ed2bc818 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=21698 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=36ed2bc818 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=512 identity=21698 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=36ed2bc818 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=512 identity=21698 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=36ed2bc818 endpointID=512 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=36ed2bc818 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=512 identity=21698 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6d50ef2b-2d91-42a3-9bdf-8661dfb1f153 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.22 e48779d0-8acf-461d-8bc2-698d78cdfc43 default   }" containerID=3fdc4288d036a4210976076d0bd67577945c08b9dc35b1fe1a175ae8cc7da2a4 datapathConfiguration="&{false false false false false <nil>}" interface=lxca6f3b48de2c9 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=3108 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1579 identity=3108 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3fdc4288d0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1579 identity=3108 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3fdc4288d0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1579 identity=3108 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.70 ce931874-f791-489f-9544-897a19d7f8b3 default   }" containerID=d4699c5d88e10ba886c06ad8cbae898db67977c729fadfc8fc5e3a352486596e datapathConfiguration="&{false false false false false <nil>}" interface=lxc6365a218c31f k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d4699c5d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d4699c5d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d4699c5d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=36854 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d4699c5d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=36854 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=d4699c5d88 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=37 identity=36854 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d4699c5d88 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=37 identity=36854 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-7m8r9 subsys=daemon
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=10171d7a-865b-4622-8e6e-08c2e73cdec0] Description:}]" policyAddRequest=f4ce128e-1328-45bd-8121-8f6793959bda subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=f4ce128e-1328-45bd-8121-8f6793959bda policyRevision=4 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.164 871662cf-8ed0-4fa6-b375-5e5d31ea680b default   }" containerID=4b3df8fd9c2173268fbe07f377eda035ced21ba97b4ede7cc123437e71a38275 datapathConfiguration="&{false false false false false <nil>}" interface=lxc203ab613312c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=22732 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3786 identity=22732 ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4b3df8fd9c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3786 identity=22732 ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4b3df8fd9c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3786 identity=22732 ipv4=10.0.0.164 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.030150958792329662 newInterval=7m30s subsys=map-ct
level=info msg="Create endpoint request" addressing="&{10.0.0.69 d74cfd98-b2cb-42f0-aaf2-6ad1bb842468 default   }" containerID=7d6c2f5d3104c775a66ca839f6d6caeeb33a9d705deb19cce95f3d993a2c2c03 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc7bcedcd3a65 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7d6c2f5d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7d6c2f5d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=7d6c2f5d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=26773 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=7d6c2f5d31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=26773 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=7d6c2f5d31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3266 identity=26773 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7d6c2f5d31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3266 identity=26773 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-dhql8 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.57 191f7bdf-b408-4f29-a180-1e532a112120 default   }" containerID=9820b10ecbb3eff264e8497096845b3fcf18773b9f92677f4e302031e54f11cf datapathConfiguration="&{false false false false false <nil>}" interface=lxcd17b735d0213 k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=9820b10ecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=9820b10ecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=9820b10ecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identity=3915 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=9820b10ecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identity=3915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=9820b10ecb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=830 identity=3915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=endpoint
level=info msg="Successful endpoint creation" containerID=9820b10ecb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=830 identity=3915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=9820b10ecb endpointID=830 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-rqz4c subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=9b2d33c8-fbd5-41a5-be61-3ede0ad58458 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=9820b10ecb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=830 identity=3915 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-rqz4c subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.198 b0db4b60-f9da-4fd0-b594-e9200009795c default   }" containerID=e6f4846de90f4cdb711e4f9a396da3296054788eeb9be61bced98918b3839075 datapathConfiguration="&{false false false false false <nil>}" interface=lxc90852ac0ddbd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e6f4846de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e6f4846de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e6f4846de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=43675 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e6f4846de9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=43675 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.252 bb552de9-6f27-4b9d-b4e0-84ad0c3c5a02 default   }" containerID=846b04b1a7e4d28d0c673b03df943bc9e7001c0f2878749ebebad0639429ab9b datapathConfiguration="&{false false false false false <nil>}" interface=lxc44b6de111542 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=846b04b1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=846b04b1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=846b04b1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=58355 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=846b04b1a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=58355 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.146 c6175091-dc29-474c-a050-0e66ba510ee7 default   }" containerID=64a5111c43425f81f018341f93352abbc67bad218ecd397bd62ba3930e70c007 datapathConfiguration="&{false false false false false <nil>}" interface=lxcbe1763070383 k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=64a5111c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=64a5111c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=64a5111c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=11674 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=64a5111c43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=11674 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e6f4846de9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1193 identity=43675 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e6f4846de9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1193 identity=43675 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-6phwc subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=846b04b1a7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3590 identity=58355 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f subsys=endpoint
level=info msg="Successful endpoint creation" containerID=846b04b1a7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3590 identity=58355 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-6x96f subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=64a5111c43 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2420 identity=11674 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=64a5111c43 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2420 identity=11674 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-65f89944dd-kwpzg subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.224 aad5c8f6-275d-44f1-9ae0-9a831b7b2323 default   }" containerID=0b0ba4ca99c237580b37a839ec1a8446b468b500c2835dddfda73ab8f4bf014d datapathConfiguration="&{false false false false false <nil>}" interface=lxcabff4c1ffde2 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0b0ba4ca99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0b0ba4ca99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=0b0ba4ca99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identity=20556 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0b0ba4ca99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3571 identity=20556 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=0b0ba4ca99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3571 identity=20556 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0b0ba4ca99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3571 identity=20556 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=0b0ba4ca99 endpointID=3571 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-q8q5d subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1425de7b-214b-4d06-9719-c5c4225955b6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=0b0ba4ca99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3571 identity=20556 ipv4=10.0.0.224 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-q8q5d subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.149 b1efd9f5-0c4f-4bd3-8567-97fe4daacbc5 default   }" containerID=5d84c94109167a11b6a97627518b7c5d777c721237c63fe01f402b899834751a datapathConfiguration="&{false false false false false <nil>}" interface=lxcefeaf715a6f3 k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5d84c94109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5d84c94109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5d84c94109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=21698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5d84c94109 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=405 identity=21698 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5d84c94109 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=405 identity=21698 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5d84c94109 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=405 identity=21698 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.224 85d94190-1e42-4bc5-8da3-7ad6d37c5947 default   }" containerID=5a8b3efea948776e5127b2eb291025f4a4ea3fed91f81633fe2fbfeea41c8f37 datapathConfiguration="&{false false false false false <nil>}" interface=lxc68d6a7afd268 k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5a8b3efea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5a8b3efea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=5a8b3efea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=21698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5a8b3efea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2406 identity=21698 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5a8b3efea9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2406 identity=21698 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5a8b3efea9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2406 identity=21698 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=daemon
level=info msg="Delete endpoint request" containerID=5d84c94109 endpointID=405 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=5d84c94109 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=405 identity=21698 ipv4=10.0.0.149 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ab5bb4e-0a3e-4c07-8efb-b30d63e181fd subsys=endpoint
level=info msg="Delete endpoint request" containerID=5a8b3efea9 endpointID=2406 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=5a8b3efea9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2406 identity=21698 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5225adf9-8076-4f46-a866-9318893bf34c subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.90 afdc8446-529e-42b5-9523-ec44d9c7aada default   }" containerID=b35a56004f1917c43a3d6b39678c05eed99e5ab7ae247a40b6a075cc083bd0cd datapathConfiguration="&{false false false false false <nil>}" interface=lxc7c700c5c08cd k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b35a56004f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b35a56004f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b35a56004f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=1136 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b35a56004f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3607 identity=1136 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b35a56004f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3607 identity=1136 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b35a56004f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3607 identity=1136 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.31 1ee8c2e0-81db-4403-9ae4-0ff0cdf84e10 default   }" containerID=792749e4cde2ac6c245f249f7327ac475ea80118c6664354a18d3d6037e53e71 datapathConfiguration="&{false false false false false <nil>}" interface=lxc5d76a38521f1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=792749e4cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=792749e4cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=792749e4cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identity=9469 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=792749e4cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=732 identity=9469 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=792749e4cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=732 identity=9469 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=792749e4cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=732 identity=9469 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.23 8d2ee23f-185e-4356-aa98-f4e538e561cc default   }" containerID=e9b8eed6c3587469ca0fd0ec697ba0f1e5f327686688e256abe3d0d789cf5ef7 datapathConfiguration="&{false false false false false <nil>}" interface=lxc5406b6405bc6 k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e9b8eed6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e9b8eed6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e9b8eed6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=21698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e9b8eed6c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=21698 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e9b8eed6c3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=555 identity=21698 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e9b8eed6c3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=21698 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=daemon
level=info msg="Delete endpoint request" containerID=e9b8eed6c3 endpointID=555 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=e9b8eed6c3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=555 identity=21698 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a83070b-3b98-448d-8b1c-dd647192cd0e subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.98 84b6507b-6c63-471c-9d28-97b16d4ab15a default   }" containerID=f3879739afcbd2e56aebe0479a31d25382a512ec90c8da4f8f09f0a777cc17f4 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc112961702a8 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f3879739af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f3879739af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=f3879739af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=62698 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f3879739af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=823 identity=62698 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f3879739af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=823 identity=62698 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f3879739af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=823 identity=62698 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.152 d756dd07-6903-44f1-829d-e0dfbf1fab7e default   }" containerID=a37cddd9999709a98ece2ac3b939ee7a9052fde27e6c80e3de1b159848541115 datapathConfiguration="&{false false false false false <nil>}" interface=lxc3088bc14630a k8sPodName=openstack/keystone-api-56f54fd445-spd6p labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a37cddd999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a37cddd999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a37cddd999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=1455 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a37cddd999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2009 identity=1455 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.249 3ca3f8de-e733-45d3-bdc8-dc7c4e749975 default   }" containerID=ddfa30329379934813c93ce87a343729dcde30c579cd9fc0010dffbd17ea25c1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc215eefdcfbc0 k8sPodName=openstack/keystone-credential-setup-2vrrg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=ddfa303293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=ddfa303293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=ddfa303293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=5680 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=ddfa303293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=5680 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=a37cddd999 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2009 identity=1455 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a37cddd999 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2009 identity=1455 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-api-56f54fd445-spd6p subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=ddfa303293 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2904 identity=5680 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=ddfa303293 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2904 identity=5680 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=ddfa303293 endpointID=2904 k8sNamespace=openstack k8sPodName=keystone-credential-setup-2vrrg subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=4609ed8e-2866-429a-a5e1-d864c50839f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=ddfa303293 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2904 identity=5680 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-2vrrg subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.234 8516d996-facc-467d-be20-e6f948f56fa0 default   }" containerID=52a592f3a8e7a6935eb24ca80136266f73e1736e88d7351c74cbee4b99aaad22 datapathConfiguration="&{false false false false false <nil>}" interface=lxc3376621c99d6 k8sPodName=openstack/keystone-db-init-484j8 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=27003 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=27003 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=52a592f3a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1777 identity=27003 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=52a592f3a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1777 identity=27003 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=52a592f3a8 endpointID=1777 k8sNamespace=openstack k8sPodName=keystone-db-init-484j8 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=0dc9d01a-541b-418c-b5cc-e067b525512b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=52a592f3a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1777 identity=27003 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-db-init-484j8 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.151 b1278423-fc39-499f-ac51-635724aed777 default   }" containerID=f9b9bb29da70c07207d3acca7be85f6c927a0131aa26e04fe4f0b5a8bf47fab7 datapathConfiguration="&{false false false false false <nil>}" interface=lxc4d86ee437732 k8sPodName=openstack/keystone-fernet-setup-k4d4l labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1098 identity=8254 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1098 identity=8254 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f9b9bb29da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1098 identity=8254 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f9b9bb29da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1098 identity=8254 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=f9b9bb29da endpointID=1098 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-k4d4l subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=091f64ec-9ff9-4ee4-891c-6ea1e25a92c2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=f9b9bb29da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1098 identity=8254 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/keystone-fernet-setup-k4d4l subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.235 c57a79f8-d48d-475f-8403-9abc0d74079d default   }" containerID=bc89c293f47cfddc23130191cf294341d30e2aa663a2d18c881fe3503157a77a datapathConfiguration="&{false false false false false <nil>}" interface=lxc20f8dbb75b6e k8sPodName=openstack/keystone-db-sync-bx9ps labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=2121 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=2121 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=bc89c293f4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3418 identity=2121 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=endpoint
level=info msg="Successful endpoint creation" containerID=bc89c293f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3418 identity=2121 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=bc89c293f4 endpointID=3418 k8sNamespace=openstack k8sPodName=keystone-db-sync-bx9ps subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=25731c61-5335-4150-9abf-83d8e5f46dad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=bc89c293f4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3418 identity=2121 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-db-sync-bx9ps subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.16 4e232819-d28a-4a7f-8c4a-d7f2c233b17a default   }" containerID=d1e91cda98f5d503bd5d096a0be18bdc04e904d675d5be171160ad9dc2519f88 datapathConfiguration="&{false false false false false <nil>}" interface=lxc5e55543d3927 k8sPodName=openstack/keystone-rabbit-init-mf4vb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d1e91cda98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d1e91cda98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d1e91cda98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=50689 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d1e91cda98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=50689 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=d1e91cda98 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=393 identity=50689 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d1e91cda98 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=393 identity=50689 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=d1e91cda98 endpointID=393 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mf4vb subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f8d79aa7-2d59-4fa2-b52a-d1830ac9eb01 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=d1e91cda98 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=393 identity=50689 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-rabbit-init-mf4vb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.143 fa1464ef-fc4c-47ef-8482-962ac6df8761 default   }" containerID=8302df084b69c9415ed7f3844f2c7168cc5774591a99d2f264e85c0f4dc36890 datapathConfiguration="&{false false false false false <nil>}" interface=lxc6dbb28a4f976 k8sPodName=openstack/keystone-domain-manage-rpbxr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8302df084b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8302df084b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9908115a-a5a6-4447-8e3f-38125029f130,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9908115a-a5a6-4447-8e3f-38125029f130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9908115a-a5a6-4447-8e3f-38125029f130;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=9908115a-a5a6-4447-8e3f-38125029f130;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=8302df084b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=51075 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9908115a-a5a6-4447-8e3f-38125029f130,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=9908115a-a5a6-4447-8e3f-38125029f130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8302df084b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=521 identity=51075 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=8302df084b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=521 identity=51075 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8302df084b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=521 identity=51075 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=daemon
level=info msg="Delete endpoint request" containerID=8302df084b endpointID=521 k8sNamespace=openstack k8sPodName=keystone-domain-manage-rpbxr subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9908115a-a5a6-4447-8e3f-38125029f130 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=9908115a-a5a6-4447-8e3f-38125029f130 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=8302df084b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=521 identity=51075 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-rpbxr subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.16 76eff0c7-eff5-413e-b70f-dcdec3cf7f0b default   }" containerID=b1a730213cd314411c273d8b495e1b1a425b9142c659c4150631ca407c2b787e datapathConfiguration="&{false false false false false <nil>}" interface=lxca8c9d6d84faa k8sPodName=openstack/keystone-bootstrap-lpsb5 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b1a730213c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b1a730213c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b1a730213c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=18487 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b1a730213c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=30 identity=18487 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b1a730213c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=30 identity=18487 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b1a730213c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=30 identity=18487 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=b1a730213c endpointID=30 k8sNamespace=openstack k8sPodName=keystone-bootstrap-lpsb5 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=7f7d2956-9a82-4105-8370-de0dcb15a8f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=b1a730213c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=30 identity=18487 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-lpsb5 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.194 4499687d-0704-4f74-aad0-816b2e41dfcf default   }" containerID=1ec68ab3bb1d440dfc256292bdf0565e302be3e5fc663dd2e2249037b82e95c4 datapathConfiguration="&{false false false false false <nil>}" interface=lxcb87ae69ed8f4 k8sPodName=openstack/horizon-75ff448d99-pkd6q labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1ec68ab3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1ec68ab3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=1ec68ab3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=5078 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1ec68ab3bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=5078 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=1ec68ab3bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1854 identity=5078 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1ec68ab3bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1854 identity=5078 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/horizon-75ff448d99-pkd6q subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.221 4ca4bbca-0495-4a81-993e-7317ab515a3c default   }" containerID=69e935588ed5365d658b5549693c2ca1e8f4d800e75227f7762a8d2014ddfd39 datapathConfiguration="&{false false false false false <nil>}" interface=lxc53623f77c720 k8sPodName=openstack/horizon-75ff448d99-m7b8l labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=69e935588e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=69e935588e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.253 958cedd1-033d-47f9-b828-79c0264725ba default   }" containerID=870558116b86ccc41d65ddf8f9de4a46eb6e8c2f2464d3831d019ec0c6cfa967 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf8b6157d9307 k8sPodName=openstack/horizon-db-init-fmx6g labels="[]" subsys=daemon sync-build=true
level=info msg="Identity of endpoint changed" containerID=69e935588e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=5078 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=69e935588e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=5078 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l subsys=endpoint
level=info msg="New endpoint" containerID=870558116b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=870558116b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Create endpoint request" addressing="&{10.0.0.254 f9bf8f8b-43db-4844-97be-96ce7846840f default   }" containerID=4aa7751d64899feb9c1f2e7c6e08db2217b69979adb025fa152cabd2aa7d572d datapathConfiguration="&{false false false false false <nil>}" interface=lxcca227c32c83c k8sPodName=openstack/horizon-75ff448d99-glnb7 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4aa7751d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4aa7751d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=4aa7751d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=5078 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4aa7751d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=5078 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=870558116b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=4698 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=870558116b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=4698 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4aa7751d64 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1268 identity=5078 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4aa7751d64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1268 identity=5078 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/horizon-75ff448d99-glnb7 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=69e935588e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1839 identity=5078 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l subsys=endpoint
level=info msg="Successful endpoint creation" containerID=69e935588e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1839 identity=5078 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/horizon-75ff448d99-m7b8l subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=870558116b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=83 identity=4698 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=endpoint
level=info msg="Successful endpoint creation" containerID=870558116b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=83 identity=4698 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=870558116b endpointID=83 k8sNamespace=openstack k8sPodName=horizon-db-init-fmx6g subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=e0f64409-c16f-4394-9ac7-092a41fdcd0e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=870558116b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=83 identity=4698 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/horizon-db-init-fmx6g subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.17 5fba5ac2-a267-41b0-8f9a-bba377cc9bb2 default   }" containerID=61ede05d6a5513c85dd0ab4a9ae40aabb8e9f29f843c03938618aff723fcf188 datapathConfiguration="&{false false false false false <nil>}" interface=lxca7f344fd0ce6 k8sPodName=openstack/horizon-db-sync-dgx97 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=3322 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=3322 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=61ede05d6a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=889 identity=3322 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=61ede05d6a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=889 identity=3322 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=61ede05d6a endpointID=889 k8sNamespace=openstack k8sPodName=horizon-db-sync-dgx97 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=b087ef41-edb1-4fb8-800e-aede16146ba4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=61ede05d6a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=889 identity=3322 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/horizon-db-sync-dgx97 subsys=endpoint