level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.12438ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="68.881µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.620714ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="42.821µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=102.036489ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="42.722µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="21.5µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="103.793µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="82.422µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="104.713µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="530.874µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.36µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.668967ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.35066ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="153.683µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="130.094µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="343.571µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="221.336µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="148.524µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.253573ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="150.434µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.3.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.522049ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="5.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.965751ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.621µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=103.186441ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="24.321µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.721µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="91.433µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="316.109µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.36µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="15.39µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="185.886µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="563.406µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.040597ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.45µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="9.37µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.3 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.3 ipAddr.ipv6="" k8sNodeIP=199.204.45.3 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.3" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.49" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.3" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.3} {CiliumInternalIP 10.0.0.49}] 10.0.0.0/24 [] [] 10.0.0.5 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40899" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.510485653s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="35.691µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="10.8µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="86.832µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="28.69µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.582078357s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 109b0752-40c7-49d3-8cef-ea4c2a37cc68 default }" containerID=996aed7251325db940615c022f288aefffda4d3a6fede8fe3b3d2c9d25fcb4c3 datapathConfiguration="&{false false false false false }" interface=lxccf5f3f5257a4 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.238 1da92d71-3f74-4f27-ba4b-10cfaa0ecca2 default }" containerID=c009d7c6688113e1144737e2b5abb9396312771d8f54804d422d65921ae55eb8 datapathConfiguration="&{false false false false false }" interface=lxc4ca7ba221727 k8sPodName=kube-system/coredns-7c96b6546b-h45wf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=20765 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=20765 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identity=29049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3513 identity=29049 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=361.271142ms file-path=/var/run/cilium/state/templates/5d5cc835e88e2ceeacead486bdb49c97aea59ac0a6e022df4dd695bd1f7d0bce/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=977 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4037 ipv4=10.0.0.5 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4037 identityLabels="reserved:health" ipv4=10.0.0.5 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4037 identity=4 identityLabels="reserved:health" ipv4=10.0.0.5 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.182768822s file-path=/var/run/cilium/state/templates/4b3e0c4a13b6361d15b627b4e51adb9cbb17a044f42d958f2c984f87f8a37260/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=996aed7251 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=457 identity=20765 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=endpoint level=info msg="Successful endpoint creation" containerID=996aed7251 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=457 identity=20765 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c009d7c668 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3513 identity=29049 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=endpoint level=info msg="Successful endpoint creation" containerID=c009d7c668 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3513 identity=29049 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4037 identity=4 ipv4=10.0.0.5 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=996aed7251 endpointID=457 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-82xsx subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=e86597cc-e34f-4a05-b4e5-69557f90470c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=996aed7251 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=457 identity=20765 ipv4=10.0.0.50 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-82xsx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 d2d4a354-2d4f-44ff-bdf0-989f4c143668 default }" containerID=d34c38e0ea835161dd2ee25e2bd2763c4c299f1cfa03008a9770e18dd5a39b5c datapathConfiguration="&{false false false false false }" interface=lxc14afdba796f7 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=32922 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2595 identity=32922 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d34c38e0ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2595 identity=32922 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d34c38e0ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2595 identity=32922 ipv4=10.0.0.20 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-48sfc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=977 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00977 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00977 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00977 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00977:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=977 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 b923ce88-1390-4205-b122-0fbbbed82e80 default }" containerID=bee01bcbead765be19d2e7596ff1aaaeeb82e1288d3115a917769b7c6b7e77c0 datapathConfiguration="&{false false false false false }" interface=lxcbd572f2e2672 k8sPodName=kube-system/coredns-67659f764b-pztsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bee01bcbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bee01bcbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bee01bcbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identity=29049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bee01bcbea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3127 identity=29049 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bee01bcbea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3127 identity=29049 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bee01bcbea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3127 identity=29049 ipv4=10.0.0.34 ipv6= k8sPodName=kube-system/coredns-67659f764b-pztsj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.100 0f8039f2-d502-4b3b-8625-45aa5fae8406 default }" containerID=f1fd8f11cda7de2fdbd82b1d69533bff05dcb6bd2a4382ccc67296035138363a datapathConfiguration="&{false false false false false }" interface=lxcd4e09b6203de k8sPodName=kube-system/coredns-67659f764b-lgbxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1fd8f11cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1fd8f11cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f1fd8f11cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=29049 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1fd8f11cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=29049 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1fd8f11cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=449 identity=29049 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1fd8f11cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=29049 ipv4=10.0.0.100 ipv6= k8sPodName=kube-system/coredns-67659f764b-lgbxf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 63371b5f-9a2b-458d-af82-2fe5e3708a29 default }" containerID=f49ea4fa89f63d88525132088dbdec3ff1175c5bd06c98708c463c4a0b147a7f datapathConfiguration="&{false false false false false }" interface=lxcd83477d9f819 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f49ea4fa89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f49ea4fa89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f49ea4fa89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=7312 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f49ea4fa89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=7312 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f49ea4fa89 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=826 identity=7312 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=f49ea4fa89 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=826 identity=7312 ipv4=10.0.0.66 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zpvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c009d7c668 endpointID=3513 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-h45wf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=c009d7c668 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3513 identity=29049 ipv4=10.0.0.238 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-h45wf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 bf3fef38-65fc-48b6-ad4f-47a79256c5b4 default }" containerID=ba9ef4d4de9af080f98aa1a0702334b3241e8afa86badd30b2ba4864626229d7 datapathConfiguration="&{false false false false false }" interface=lxc4b1954af6018 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=16898 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=16898 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba9ef4d4de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2557 identity=16898 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba9ef4d4de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2557 identity=16898 ipv4=10.0.0.128 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-g6j8z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 b52f1806-e870-426b-a752-5b70b788015c default }" containerID=9055b7d92b8c1b942107f0d42c6128bbba4c7b08c50644ba3250a77289b7b37a datapathConfiguration="&{false false false false false }" interface=lxc64fc11190873 k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.202 5d0f6bba-fa2b-46e0-ab4b-42ad08e02cc3 default }" containerID=944168c198b3ed0930b5380dc9607ea0148b03a09faba316fa40c7f323962e51 datapathConfiguration="&{false false false false false }" interface=lxcec87ba59ca5b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9055b7d92b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 subsys=endpoint level=info msg="New endpoint" containerID=944168c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9055b7d92b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=944168c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9055b7d92b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=14051 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=9055b7d92b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=14051 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=944168c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=23889 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=944168c198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=813 identity=23889 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9055b7d92b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=108 identity=14051 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9055b7d92b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=108 identity=14051 ipv4=10.0.0.10 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-fwd72 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=944168c198 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=813 identity=23889 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp subsys=endpoint level=info msg="Successful endpoint creation" containerID=944168c198 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=813 identity=23889 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4kmcp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.12 f3dc1364-488b-4ace-abb8-52d4af0673f5 default }" containerID=154fa9419f039adaac04729b77317da32adb9b18b07db5bf54c9a3b4be1ab13c datapathConfiguration="&{false false false false false }" interface=lxc772ee2c5d057 k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=154fa9419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=154fa9419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=154fa9419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=37264 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=154fa9419f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1168 identity=37264 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=154fa9419f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1168 identity=37264 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=154fa9419f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1168 identity=37264 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=154fa9419f endpointID=1168 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-l89hn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1e57da97-5fd5-4ae1-86ab-f5f272a59a9c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=154fa9419f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1168 identity=37264 ipv4=10.0.0.12 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-l89hn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 47ba7161-6edb-429f-b945-186fcd4d1915 default }" containerID=deb390e7cd3cda8d48613f2072eaad958dda79daeea9af00599e3e9cff7f15c7 datapathConfiguration="&{false false false false false }" interface=lxc0ca2a94c500e k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identity=33805 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3225 identity=33805 ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=deb390e7cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3225 identity=33805 ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=endpoint level=info msg="Successful endpoint creation" containerID=deb390e7cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3225 identity=33805 ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=deb390e7cd endpointID=3225 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7ggsm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=3bbe53af-3b92-4f62-af10-14aae55abe7f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=deb390e7cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3225 identity=33805 ipv4=10.0.0.21 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7ggsm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 e7ee1dae-a586-44e0-9323-425c2b373860 default }" containerID=9851e1003145a03a4c49debb08981e98d1065d0be59ab4155b95a73dd19c42cf datapathConfiguration="&{false false false false false }" interface=lxc823011ed9118 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=54992 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=33 identity=54992 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9851e10031 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=33 identity=54992 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9851e10031 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=33 identity=54992 ipv4=10.0.0.83 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qw8pg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 02624a53-0fc4-44cf-9b4e-7fbd1cb19a12 default }" containerID=c90d5df69a53e7b5b3a1adffcac7ddee7f3da21ebbce837495e239983fa94f70 datapathConfiguration="&{false false false false false }" interface=lxca1b5b6950ec0 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c90d5df69a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c90d5df69a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c90d5df69a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=16835 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c90d5df69a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3716 identity=16835 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c90d5df69a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3716 identity=16835 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c90d5df69a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3716 identity=16835 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c90d5df69a endpointID=3716 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-pscjd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3fb5cc60-0596-48d2-ac84-bbca6c6ec659 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=c90d5df69a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3716 identity=16835 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-pscjd subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=64c12deb-04ad-46fe-b309-4efc6260886a] Description:}]" policyAddRequest=11571b66-1e86-4d25-96a2-de576ca26773 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=11571b66-1e86-4d25-96a2-de576ca26773 policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9fb7b3bd-8006-46fe-9acc-95b4ce2cb50a] Description:}]" policyAddRequest=107fef74-f53f-4b6d-99f5-773e3de2bcf8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=107fef74-f53f-4b6d-99f5-773e3de2bcf8 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.221 d846e765-c6bd-46e1-8921-b367fc566b56 default }" containerID=009fb77e218c614a14c4152d656f1e6561ec706ea83ca5b94c0f81f4927b444f datapathConfiguration="&{false false false false false }" interface=lxc0cde024e2758 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=009fb77e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=009fb77e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=009fb77e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=4944 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=009fb77e21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3189 identity=4944 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=009fb77e21 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3189 identity=4944 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg subsys=endpoint level=info msg="Successful endpoint creation" containerID=009fb77e21 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3189 identity=4944 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-ghthg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 3b49a5e6-541c-4993-86b9-dba8f8a50c1d default }" containerID=e037121fe6e428a0919015747e1c5bee7ca44a15d47a0b3e9b6cccc82a1dff99 datapathConfiguration="&{false false false false false }" interface=lxc865f41c15ec4 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e037121fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3287 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e037121fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3287 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e037121fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3287 identity=37115 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e037121fe6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3287 identity=37115 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e037121fe6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3287 identity=37115 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=e037121fe6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3287 identity=37115 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-rvcgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 f6a8e64a-f61a-4449-8200-5fcc7f453b22 default }" containerID=f422d6713f216bdef24d6021acf1f8767200b9606029fc90b1108e172784786a datapathConfiguration="&{false false false false false }" interface=lxc601753793fcf k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f422d6713f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f422d6713f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f422d6713f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=31480 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f422d6713f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=820 identity=31480 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f422d6713f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=820 identity=31480 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f422d6713f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=820 identity=31480 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-wfs95 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 a60dd66d-e1f1-4a45-b866-be74f3989a35 default }" containerID=8869ad75a7949299ab1b2b9230ad8222f8a6194765243f87b20ce79546311672 datapathConfiguration="&{false false false false false }" interface=lxc656e22db96e7 k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8869ad75a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8869ad75a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8869ad75a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8869ad75a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=54 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8869ad75a7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=54 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8869ad75a7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=54 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.120 93963252-9d2b-42e4-aa25-8902435b27a9 default }" containerID=3be7abc9630f363e2fe7e49d1ca3e145e5c471cb6669afa7cb6500f1fc199f87 datapathConfiguration="&{false false false false false }" interface=lxc8f32aefc7eaf k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3be7abc963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3be7abc963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3be7abc963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identity=7049 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3be7abc963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identity=7049 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3be7abc963 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2276 identity=7049 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3be7abc963 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2276 identity=7049 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8869ad75a7 endpointID=54 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8869ad75a7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=54 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7fec35d2-e812-4176-8137-8e233cabfb95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 e9c06d23-3b84-4360-92f6-01f9a62d796d default }" containerID=2560b4502a72e0cb21ab0fce7e448fb146f95d7a1680c47a8bcc32b02356d590 datapathConfiguration="&{false false false false false }" interface=lxc249d7679f610 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2560b4502a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2560b4502a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2560b4502a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=53085 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2560b4502a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2747 identity=53085 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2560b4502a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2747 identity=53085 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2560b4502a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2747 identity=53085 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2d7f8f4d-e635-42d4-9ffe-69c01e23f97d] Description:}]" policyAddRequest=b98b670f-ab32-41c8-88b1-d6c9cfeb261e subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b98b670f-ab32-41c8-88b1-d6c9cfeb261e policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 bc228288-b8a0-4a20-befd-3233f3717a75 default }" containerID=d6741ca179fad28e59624c6dc157bc4395c9b59a469b2914642a2867f2496273 datapathConfiguration="&{false false false false false }" interface=lxc2dd7f524e520 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6741ca179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6741ca179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6741ca179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=33067 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6741ca179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1027 identity=33067 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d6741ca179 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1027 identity=33067 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6741ca179 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1027 identity=33067 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.007784706534824895 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.253 d85d6d0a-e050-43a0-b095-f38031136e43 default }" containerID=e6184c122f7d15a5f17a84c5379bdabd289ebb28c032b8ef40d8ea2fb40eafdb datapathConfiguration="&{false false false false false }" interface=lxc110a6f8334dc k8sPodName=monitoring/node-feature-discovery-worker-vpldh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=7618 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=7618 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 3c4afc50-aa67-4a29-b49c-2b460a7ced2a default }" containerID=4f5e3394abecd0bd241bfde2df9eb46a252756672eafdd6e902f192467cfcf89 datapathConfiguration="&{false false false false false }" interface=lxc8c0ba9f53ff9 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f5e3394ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f5e3394ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f5e3394ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identity=10371 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f5e3394ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3711 identity=10371 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6184c122f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=254 identity=7618 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6184c122f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=254 identity=7618 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-vpldh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.102 e31b7f60-dba0-4887-9e1f-8b74140ce98b default }" containerID=2df8e47d57ef6cd5f0ad7faa89adc999468c1a3564706e66ef83b0f6e79914b4 datapathConfiguration="&{false false false false false }" interface=lxc2707d764c758 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2df8e47d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2df8e47d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2df8e47d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identity=24806 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2df8e47d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2761 identity=24806 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f5e3394ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3711 identity=10371 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f5e3394ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3711 identity=10371 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-njvn5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2df8e47d57 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2761 identity=24806 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2df8e47d57 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2761 identity=24806 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-pzh28 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 158ccae2-abf7-4c98-a13a-b96a24075876 default }" containerID=28512071bbccb0ef32dd368c5eac3dd58e2a872cc3698777979f1327455b3efc datapathConfiguration="&{false false false false false }" interface=lxc6c8f1ad5295c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28512071bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28512071bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28512071bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=46411 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28512071bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=46411 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28512071bb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=380 identity=46411 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=28512071bb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=380 identity=46411 ipv4=10.0.0.65 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bsfr5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=977 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00977 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00977 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00977 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00977:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=977 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 158f1c93-b061-4d7e-8b38-15095bd7b6fe default }" containerID=97b11545fe1c3555820ce2d4ed8f0a46ca51a1162c44c6e467a9a3bd72481b57 datapathConfiguration="&{false false false false false }" interface=lxc5105cc5421e7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=12344 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=12344 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=97b11545fe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3487 identity=12344 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97b11545fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3487 identity=12344 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=97b11545fe endpointID=3487 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ts455 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=62655ab2-42ce-4522-a4a2-5695540f3c94 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=97b11545fe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3487 identity=12344 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ts455 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 d8217264-4b35-4f17-902e-adff58a97127 default }" containerID=4c9d4a873b5b1376f22f85a7aec35876d7434b5a283a7bc2e7c419cc395c7737 datapathConfiguration="&{false false false false false }" interface=lxc2301bdb1c0f1 k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c9d4a873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c9d4a873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4c9d4a873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=982 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c9d4a873b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=982 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 5efe8ac7-3e70-4b32-a9f0-93b36703013c default }" containerID=b121b583abf4fb1cbe1ce62b89949ea3925fe1a63e95841f82895070cfafabc5 datapathConfiguration="&{false false false false false }" interface=lxc5af4866a345c k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b121b583ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3789 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 9fe948e3-32f5-4b05-9c99-2aabdff6c9d7 default }" containerID=164c66f2e24c51b23cb015633d4b4df65f1b91dca376acb3da2a431b62016cc8 datapathConfiguration="&{false false false false false }" interface=lxc61fb75afb221 k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b121b583ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3789 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 subsys=endpoint level=info msg="New endpoint" containerID=164c66f2e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=164c66f2e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b121b583ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3789 identity=50260 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b121b583ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3789 identity=50260 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=164c66f2e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=8708 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=164c66f2e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=8708 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c9d4a873b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=675 identity=982 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c9d4a873b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=675 identity=982 ipv4=10.0.0.101 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-nwr9x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b121b583ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3789 identity=50260 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b121b583ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3789 identity=50260 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-jqtr4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=164c66f2e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=295 identity=8708 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=164c66f2e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=295 identity=8708 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f77675f94-krvgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 63c038b3-7733-4c19-bccc-841dafaf8c3c default }" containerID=6404bf89f105ca69bcb7e4c4dde711fc9a09cc2547d9aaa1f7176749fd629e09 datapathConfiguration="&{false false false false false }" interface=lxcc9fb2be46b5f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6404bf89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6404bf89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6404bf89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=10486 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6404bf89f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2945 identity=10486 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6404bf89f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2945 identity=10486 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6404bf89f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2945 identity=10486 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 87d99b6b-1f88-4263-9ed9-e0cd2f852f41 default }" containerID=fd992635a92c7c155cc3040926aa616e0c8d4525f19491c559cc3e0adcd4635c datapathConfiguration="&{false false false false false }" interface=lxc4edef86a8186 k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd992635a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd992635a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd992635a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd992635a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=40 identity=36528 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd992635a9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=40 identity=36528 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd992635a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=40 identity=36528 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 d6479484-fd14-44cd-a85f-c3aa61410bd0 default }" containerID=565721ff5de21a31c040203711f0f04f6722cad1166297be73a782275fd0c9f2 datapathConfiguration="&{false false false false false }" interface=lxc1ed057ee673f k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=565721ff5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=565721ff5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=565721ff5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=565721ff5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=323 identity=36528 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=565721ff5d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=323 identity=36528 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=565721ff5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=323 identity=36528 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=daemon level=info msg="Delete endpoint request" containerID=6404bf89f1 endpointID=2945 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-p8887 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=90ca37f4-e35f-4a2d-8d23-0b2b0a2ed376 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6404bf89f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2945 identity=10486 ipv4=10.0.0.133 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-p8887 subsys=endpoint level=info msg="Delete endpoint request" containerID=565721ff5d endpointID=323 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=fd992635a9 endpointID=40 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=565721ff5d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=323 identity=36528 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fb13e78c-7d96-4a44-99fa-370731fbe0b1 subsys=endpoint level=info msg="Removed endpoint" containerID=fd992635a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=40 identity=36528 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3585fa6c-48a6-4894-9a81-0e46fbf01fa2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 ac76f066-9214-4c42-b7a7-830cda209995 default }" containerID=77e50334cc3147371dc964f3841e2f44f54cb85d4394ba57e87421e404e2ad76 datapathConfiguration="&{false false false false false }" interface=lxc76912388a5a0 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=19387 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=19387 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77e50334cc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1173 identity=19387 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77e50334cc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1173 identity=19387 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.207 2006e09b-0d57-42db-8db0-ba8ce6c87bdb default }" containerID=4bc3060cc86ac9dfa258e0b16ffd1ab9d02d4b0b867774b650f08448ed1f3852 datapathConfiguration="&{false false false false false }" interface=lxcd001d09018c6 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4bc3060cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4bc3060cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4bc3060cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=10835 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4bc3060cc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=98 identity=10835 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4bc3060cc8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=98 identity=10835 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4bc3060cc8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=98 identity=10835 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 cefbf4c9-1537-484a-bb0a-2f1f9e39e317 default }" containerID=cfea0f849c234d4dae2d31abd6ee0867373632059438760908416308166347f7 datapathConfiguration="&{false false false false false }" interface=lxc8f5bd7f1bf4e k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfea0f849c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 02900f03-f6e0-4f73-8225-ce1014794bbc default }" containerID=8b39340b384d9e67c10d3fb09422257c0c2c9271167511474a7dcc65b82c695e datapathConfiguration="&{false false false false false }" interface=lxc95a3d840cfd6 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfea0f849c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 4af576a1-0d6c-4a19-a8c2-896d2b6db836 default }" containerID=364a2913190623c7f3cfc9857d0d1559d4ac995db7f93c70c4922f5427a225cd datapathConfiguration="&{false false false false false }" interface=lxc428c8ba25aca k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 7019a1d4-115e-4074-a165-f589c7c026d6 default }" containerID=7394c28898ae7ea0b37532c97a11d7bdf92dee38051b6edc8d359de843284066 datapathConfiguration="&{false false false false false }" interface=lxc516a9646c080 k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfea0f849c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=2360 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cfea0f849c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=532 identity=2360 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=35358 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2615 identity=35358 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identity=61011 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1679 identity=36528 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3224 identity=61011 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfea0f849c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=532 identity=2360 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfea0f849c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=532 identity=2360 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-mvzbg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8b39340b38 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2615 identity=35358 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b39340b38 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2615 identity=35358 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7394c28898 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1679 identity=36528 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7394c28898 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1679 identity=36528 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=364a291319 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3224 identity=61011 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=364a291319 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3224 identity=61011 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.12 8faeeeaa-85fb-432a-a080-749280b438e6 default }" containerID=d960e6b0a0429fb53a6f518cd8d53036201e88bba8e0e9aa2c69a05cc846eaab datapathConfiguration="&{false false false false false }" interface=lxcd2876659e343 k8sPodName=monitoring/vector-v5ktf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d960e6b0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d960e6b0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d960e6b0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=59181 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d960e6b0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=59181 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d960e6b0a0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1085 identity=59181 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d960e6b0a0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1085 identity=59181 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/vector-v5ktf subsys=daemon level=info msg="Delete endpoint request" containerID=7394c28898 endpointID=1679 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7394c28898 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1679 identity=36528 ipv4=10.0.0.107 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c4053f9-ed3b-41ad-b443-7a3e9cebc4a4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 5c3e1ec2-db7e-4beb-ab3a-69417e1ddd54 default }" containerID=67cecf8704737dd31e9cff46f35b6179914d8be9312f13f2646572a1ad380b41 datapathConfiguration="&{false false false false false }" interface=lxc077ad1c061a5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=60537 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=60537 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67cecf8704 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3057 identity=60537 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cecf8704 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3057 identity=60537 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 7fd21f0f-5a11-4b99-9918-4d59d3979a0d default }" containerID=f5b48c5b7d6b065b2e86d2976e0a9910106eeacb358b43aea6e136324474fe9f datapathConfiguration="&{false false false false false }" interface=lxcd6dfce590ac1 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5b48c5b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5b48c5b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=f5b48c5b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=41111 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5b48c5b7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=41111 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5b48c5b7d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=429 identity=41111 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5b48c5b7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=429 identity=41111 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-fz8cw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 40888e6e-62b5-4de6-bfea-4412d992e791 default }" containerID=e431028d44981e6b587d56ecd41ac944e6a5086811774e1cd665411ea45f02eb datapathConfiguration="&{false false false false false }" interface=lxcfdd11294c5fd k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e431028d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e431028d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e431028d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=46556 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e431028d44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=597 identity=46556 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e431028d44 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=597 identity=46556 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e431028d44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=597 identity=46556 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-lhsd8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.113 b75c47e4-5525-48d4-8d63-2cd537cd6ec3 default }" containerID=7ffcf5802cf9bb475addff61a47e7ffedd886365a3644854355aff71d2b79a27 datapathConfiguration="&{false false false false false }" interface=lxcc43aa92e2289 k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ffcf5802c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ffcf5802c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ffcf5802c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ffcf5802c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1915 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ffcf5802c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1915 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ffcf5802c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1915 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=daemon level=info msg="Delete endpoint request" containerID=7ffcf5802c endpointID=1915 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7ffcf5802c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1915 identity=36528 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-13d2babe-9b46-426d-8797-8516ac5f3067 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 fabc5aa0-75b3-416e-b37e-788e2cc9bfc7 default }" containerID=8d32033a3e2633cecf0868bb3213fd85b58ed0a7c08bba2951bbfe85784463e8 datapathConfiguration="&{false false false false false }" interface=lxc20668c048a55 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=10755 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1046 identity=10755 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d32033a3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1046 identity=10755 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d32033a3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1046 identity=10755 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 f76167f9-a93e-4571-aaf0-ce403fa54c94 default }" containerID=1a5ec35ff9722301a34a1be45234ba031a8cee99649c6ee2ab5383ab33a528a4 datapathConfiguration="&{false false false false false }" interface=lxc63732eaadca1 k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a5ec35ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a5ec35ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a5ec35ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=17237 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1a5ec35ff9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2500 identity=17237 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 03d198f0-57d8-4da6-8e68-367ca990e2ac default }" containerID=09b996d1508cca4247fca9a93e8c7ffe0c9c03a4b86bfc8e9d5eeca22429ef0c datapathConfiguration="&{false false false false false }" interface=lxc8f91a0790933 k8sPodName=openstack/keystone-credential-setup-fpgxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b996d150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b996d150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09b996d150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=10697 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b996d150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1403 identity=10697 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a5ec35ff9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2500 identity=17237 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a5ec35ff9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2500 identity=17237 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/keystone-api-57bb9d46b6-jxc27 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=09b996d150 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1403 identity=10697 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b996d150 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1403 identity=10697 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09b996d150 endpointID=1403 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fpgxq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=491b9f66-05fe-4cf1-ac6c-f0339869b308 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=09b996d150 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1403 identity=10697 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/keystone-credential-setup-fpgxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 6623ab96-092f-4e31-a567-f3cb0a1d7204 default }" containerID=1e1f29789f10d259bba82aaec54e1a344577158663ee2f003fe0e999fa0fcd83 datapathConfiguration="&{false false false false false }" interface=lxc16082edb4476 k8sPodName=openstack/keystone-db-init-htjss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e1f29789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e1f29789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e1f29789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=52291 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e1f29789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2124 identity=52291 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e1f29789f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2124 identity=52291 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e1f29789f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2124 identity=52291 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=daemon level=info msg="Delete endpoint request" containerID=1e1f29789f endpointID=2124 k8sNamespace=openstack k8sPodName=keystone-db-init-htjss subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=d06285f2-a34c-4645-9c53-fba8150b55ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1e1f29789f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2124 identity=52291 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/keystone-db-init-htjss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 398f7116-d29f-4b66-a514-d5e172dc1028 default }" containerID=3e51c93f4d87fd9ae6b2225567fdc6c95e07eb81608fc4051f932750b967c2d2 datapathConfiguration="&{false false false false false }" interface=lxc2ce9edc31520 k8sPodName=openstack/keystone-fernet-setup-xrbkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=8882 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=8882 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e51c93f4d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=719 identity=8882 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e51c93f4d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=719 identity=8882 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e51c93f4d endpointID=719 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-xrbkc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=d01d49a4-7ce8-45e9-98c4-3f29a9fde333 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3e51c93f4d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=719 identity=8882 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/keystone-fernet-setup-xrbkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 8cebe9b8-d7ef-466f-9df3-54c6830126c6 default }" containerID=5a0f3adafcbf02d6bb5f5e243461a13489f6fa89d0cde903b72dfa7168528a0d datapathConfiguration="&{false false false false false }" interface=lxc358d22cd8abe k8sPodName=openstack/keystone-db-sync-bxgnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a0f3adafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a0f3adafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=775549e6-2e13-457a-86c8-4402fa36510f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=775549e6-2e13-457a-86c8-4402fa36510f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=775549e6-2e13-457a-86c8-4402fa36510f;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=775549e6-2e13-457a-86c8-4402fa36510f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5a0f3adafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=4098 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=775549e6-2e13-457a-86c8-4402fa36510f,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=775549e6-2e13-457a-86c8-4402fa36510f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a0f3adafc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1385 identity=4098 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a0f3adafc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1385 identity=4098 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a0f3adafc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1385 identity=4098 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a0f3adafc endpointID=1385 k8sNamespace=openstack k8sPodName=keystone-db-sync-bxgnv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=775549e6-2e13-457a-86c8-4402fa36510f k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=775549e6-2e13-457a-86c8-4402fa36510f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5a0f3adafc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1385 identity=4098 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-db-sync-bxgnv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 06db74e7-ab5e-4389-bca6-dfb9e2ea1084 default }" containerID=ace29187f3725b1ebeab7b5cd7c3c3e6a6e22cdcc20b81e9ad53fe55dde5bc53 datapathConfiguration="&{false false false false false }" interface=lxc07ec68e44649 k8sPodName=openstack/keystone-rabbit-init-s7r5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ace29187f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ace29187f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ace29187f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=10618 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ace29187f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=10618 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ace29187f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=650 identity=10618 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ace29187f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=650 identity=10618 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ace29187f3 endpointID=650 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-s7r5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=dc598893-dd52-4cd0-a4c6-aff1926308a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ace29187f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=650 identity=10618 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-rabbit-init-s7r5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 7b83070c-266e-452b-87ec-a530e0bd95a2 default }" containerID=0dc8c9c0f1edb75bbf95dafd5e237eac24f1e909d7ad568a1e21af5b89886ecd datapathConfiguration="&{false false false false false }" interface=lxceef6db051b51 k8sPodName=openstack/keystone-domain-manage-9v4rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dc8c9c0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dc8c9c0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0dc8c9c0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=32571 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dc8c9c0f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=858 identity=32571 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dc8c9c0f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=858 identity=32571 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dc8c9c0f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=858 identity=32571 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0dc8c9c0f1 endpointID=858 k8sNamespace=openstack k8sPodName=keystone-domain-manage-9v4rn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=eb7bb806-abce-4378-9726-435bda7b04dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0dc8c9c0f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=858 identity=32571 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-domain-manage-9v4rn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 b6f7aa3b-4410-42c5-8ea0-97be52e5f09f default }" containerID=1a2ea6e4559c4c0565c353a17a83c609d4db718931a764b834ae6e799fecad3c datapathConfiguration="&{false false false false false }" interface=lxcfde050f6eaf5 k8sPodName=openstack/keystone-bootstrap-hlqp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a2ea6e455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a2ea6e455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a2ea6e455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=34291 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a2ea6e455 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=653 identity=34291 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a2ea6e455 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=653 identity=34291 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a2ea6e455 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=653 identity=34291 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=daemon level=info msg="Delete endpoint request" containerID=1a2ea6e455 endpointID=653 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hlqp4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=6cd20e4c-1ed3-4a2d-b2b4-dd6fed0d523d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1a2ea6e455 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=653 identity=34291 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-hlqp4 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.033563515359746776 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.36 a044813a-a59a-419b-bd30-928d9e6f2aaf default }" containerID=15d8ecc55fdf6dd09dfe81149e22a478d624db111b10adcc584cf395b062c6bc datapathConfiguration="&{false false false false false }" interface=lxcde814ccbc98f k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15d8ecc55f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15d8ecc55f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15d8ecc55f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15d8ecc55f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=36528 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15d8ecc55f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2012 identity=36528 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=endpoint level=info msg="Successful endpoint creation" containerID=15d8ecc55f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2012 identity=36528 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=daemon level=info msg="Delete endpoint request" containerID=15d8ecc55f endpointID=2012 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=15d8ecc55f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2012 identity=36528 ipv4=10.0.0.36 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1ad81b02-bedd-402f-91e7-1741dfa30bad subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 b47b64f1-bbac-41a8-9efa-1696c2427ae4 default }" containerID=35196a5b414d2355733397f7cff6952ca0099e5a04b5a755423d5d38d2bf0df2 datapathConfiguration="&{false false false false false }" interface=lxcd0c644dd7c72 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35196a5b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35196a5b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35196a5b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=8876 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=35196a5b41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=8876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35196a5b41 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=332 identity=8876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=35196a5b41 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=332 identity=8876 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 68d16a83-7b9f-441c-a09f-6d790f2c3bbb default }" containerID=e981574d62061b8d6ceb0ef902f891135ff5dc42decba36f38aaf1258f5d6539 datapathConfiguration="&{false false false false false }" interface=lxce333a7db02b6 k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e981574d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e981574d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e981574d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=9667 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e981574d62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=9667 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e981574d62 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=867 identity=9667 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e981574d62 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=867 identity=9667 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-api-ffdc57f96-fmcl2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 664b0d81-5149-4b1f-b328-853a4aa0ab49 default }" containerID=1940d3805b1656545a7b9c0d0e3d5cfd8af9d9d6f5de781c1b804d5edb95c071 datapathConfiguration="&{false false false false false }" interface=lxc892c7ce1193b k8sPodName=openstack/barbican-db-init-xzvw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1940d3805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1940d3805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=517c5377-294f-4350-8573-34d5077a068c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=517c5377-294f-4350-8573-34d5077a068c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=517c5377-294f-4350-8573-34d5077a068c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=517c5377-294f-4350-8573-34d5077a068c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1940d3805b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=7336 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=517c5377-294f-4350-8573-34d5077a068c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=517c5377-294f-4350-8573-34d5077a068c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1940d3805b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=168 identity=7336 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1940d3805b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=168 identity=7336 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1940d3805b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=168 identity=7336 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1940d3805b endpointID=168 k8sNamespace=openstack k8sPodName=barbican-db-init-xzvw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=517c5377-294f-4350-8573-34d5077a068c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=517c5377-294f-4350-8573-34d5077a068c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1940d3805b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=168 identity=7336 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-db-init-xzvw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 3d88b0ea-a314-48c0-a662-a24608a5565b default }" containerID=4d703d6d5a704bcd70ba7d20ec230c4b49ffa09ccc9b4053793ebda95b0e65d6 datapathConfiguration="&{false false false false false }" interface=lxc8d8d03829b98 k8sPodName=openstack/barbican-db-sync-gbvgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d703d6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d703d6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d703d6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=49027 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d703d6d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=586 identity=49027 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d703d6d5a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=586 identity=49027 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d703d6d5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=586 identity=49027 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d703d6d5a endpointID=586 k8sNamespace=openstack k8sPodName=barbican-db-sync-gbvgg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=8fc377a9-f12d-4490-97f1-fb9fd61e7dd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4d703d6d5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=586 identity=49027 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/barbican-db-sync-gbvgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 bcbf44af-056e-448a-8a74-01d76c62a972 default }" containerID=6922fba152bae3be6a73a881a5b8cb14ed401cd49c31deaee4181fd8eaff77b6 datapathConfiguration="&{false false false false false }" interface=lxc2e1c0775a133 k8sPodName=openstack/barbican-rabbit-init-r5n2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6922fba152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6922fba152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6922fba152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=57350 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6922fba152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=718 identity=57350 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6922fba152 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=718 identity=57350 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=6922fba152 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=718 identity=57350 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6922fba152 endpointID=718 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-r5n2h subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d06e4fe1-e624-4502-8c02-9fcd51f43efd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6922fba152 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=718 identity=57350 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/barbican-rabbit-init-r5n2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 b5c57d97-2deb-408e-8c72-27d94881e5e2 default }" containerID=83fe9f0efe32d32144f4deb7327c2d727718ba663c5a5994060753500a5c5357 datapathConfiguration="&{false false false false false }" interface=lxc78340222e12e k8sPodName=openstack/barbican-ks-service-sx8c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83fe9f0efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83fe9f0efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83fe9f0efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=21862 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=83fe9f0efe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=385 identity=21862 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83fe9f0efe datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=385 identity=21862 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83fe9f0efe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=385 identity=21862 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83fe9f0efe endpointID=385 k8sNamespace=openstack k8sPodName=barbican-ks-service-sx8c8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=166693aa-d5a9-4fcf-acb8-5544ebaaa9cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=83fe9f0efe datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=385 identity=21862 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-sx8c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 bc26710e-3558-4505-a771-5fe684c9d34a default }" containerID=4509ba76dfdbc71e639d9d3a08dd552af98782f242a5dde82a77dd89c3be7080 datapathConfiguration="&{false false false false false }" interface=lxcf0a648464d86 k8sPodName=openstack/barbican-ks-endpoints-hqhsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4509ba76df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4509ba76df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4509ba76df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=36901 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4509ba76df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=36901 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4509ba76df datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=852 identity=36901 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=4509ba76df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=852 identity=36901 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4509ba76df endpointID=852 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-hqhsv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=965909ad-39ac-412a-8f6d-4d5ddd6bb293 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4509ba76df datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=852 identity=36901 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hqhsv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 31fb48f0-3880-43fd-832c-ef6d3ac78c0c default }" containerID=76855dd072f76affee0ab208834239ba7836ebc25b3b99dc75ec9a3ed56f3511 datapathConfiguration="&{false false false false false }" interface=lxc9f35f6610144 k8sPodName=openstack/barbican-ks-user-cm2jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76855dd072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76855dd072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76855dd072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=10764 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76855dd072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=10764 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76855dd072 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3527 identity=10764 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=76855dd072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3527 identity=10764 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76855dd072 endpointID=3527 k8sNamespace=openstack k8sPodName=barbican-ks-user-cm2jt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=ba8d1285-bae4-4f8f-b6d8-37921b2803c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=76855dd072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3527 identity=10764 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-user-cm2jt subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.15 1ffcb433-2243-4957-be3c-c1dd6e47eefc default }" containerID=61d721d6e744a3316736cc5b750c658f93ea0126ea751d48f8dd93895e5eed57 datapathConfiguration="&{false false false false false }" interface=lxc2efa524ce68c k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61d721d6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61d721d6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61d721d6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=61656 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61d721d6e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=61656 ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61d721d6e7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2416 identity=61656 ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=61d721d6e7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2416 identity=61656 ipv4=10.0.0.15 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-lhk6g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 c7ae0172-a954-463d-87a9-5ce453d7bfbe default }" containerID=844fe06c95767fcf9f5689f2357fc07ffcff7ec1811ac68a4cb8d9a87f1bf942 datapathConfiguration="&{false false false false false }" interface=lxc0f00e69c50b8 k8sPodName=openstack/rook-ceph-detect-version-bwvkp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=844fe06c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=844fe06c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=844fe06c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=11890 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=844fe06c95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=11890 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=844fe06c95 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=248 identity=11890 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=endpoint level=info msg="Successful endpoint creation" containerID=844fe06c95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=11890 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=844fe06c95 endpointID=248 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-bwvkp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=62f11dea-fd97-4bcd-8bcb-cdf804573bdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=844fe06c95 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=11890 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/rook-ceph-detect-version-bwvkp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 3f4e6ce9-d2e3-403d-bb68-3611088cb0d6 default }" containerID=b19ae5d95c85512128827e657195f4e5de88cfd5adc1bf8aff53b9fad4c136d0 datapathConfiguration="&{false false false false false }" interface=lxc2631014e2d44 k8sPodName=openstack/ceph-object-controller-detect-version-t74cl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b19ae5d95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b19ae5d95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b19ae5d95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=65083 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b19ae5d95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=65083 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b19ae5d95c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=716 identity=65083 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=endpoint level=info msg="Successful endpoint creation" containerID=b19ae5d95c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=716 identity=65083 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b19ae5d95c endpointID=716 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-t74cl subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fcb8c33e-6551-4b60-b422-21efd4fd26f8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=b19ae5d95c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=716 identity=65083 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-t74cl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 7a0d1444-42cb-410f-a744-8b802ba4bd9b default }" containerID=865d69cb3130a0ef8b2055eaa0d62bff1c78ce100a5606ab72291ddb12622099 datapathConfiguration="&{false false false false false }" interface=lxc059db4c88280 k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=865d69cb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=865d69cb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=865d69cb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identity=36528 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=865d69cb31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3451 identity=36528 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=865d69cb31 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3451 identity=36528 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=endpoint level=info msg="Successful endpoint creation" containerID=865d69cb31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3451 identity=36528 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=daemon level=info msg="Delete endpoint request" containerID=865d69cb31 endpointID=3451 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=865d69cb31 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3451 identity=36528 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-249a4322-8664-4ea2-a02b-a8fcca1080dc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 587d99ae-b7f0-4b56-85ae-76ef6faf74b5 default }" containerID=fdcb271de74a6eba2a82a82ac16639cc928fc7f4d10856c2e8f701717ef9f298 datapathConfiguration="&{false false false false false }" interface=lxcc31a570b7992 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdcb271de7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdcb271de7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdcb271de7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=6784 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdcb271de7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=805 identity=6784 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fdcb271de7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=805 identity=6784 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdcb271de7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=805 identity=6784 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 8338e000-ffd2-4d3b-937b-b0367a68e832 default }" containerID=23090aa8b8daed84799e870faff7fd1dd5e6182a57ec9740720e93a9bba4aa04 datapathConfiguration="&{false false false false false }" interface=lxc55b90abc3d89 k8sPodName=openstack/glance-db-init-f5mzx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23090aa8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23090aa8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23090aa8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=48424 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23090aa8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=48424 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=23090aa8b8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=280 identity=48424 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=endpoint level=info msg="Successful endpoint creation" containerID=23090aa8b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=280 identity=48424 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23090aa8b8 endpointID=280 k8sNamespace=openstack k8sPodName=glance-db-init-f5mzx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=f42e2bd3-ac6e-4c41-adb5-682b576a7e50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=23090aa8b8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=280 identity=48424 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/glance-db-init-f5mzx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 bec63d53-103f-456c-ae7b-4040feafd149 default }" containerID=406779e011d88b06f581294d86ad7c17738b3a2a1ff5df5b1d20422fa02d32d6 datapathConfiguration="&{false false false false false }" interface=lxcf0b70a8d552b k8sPodName=openstack/glance-db-sync-6897x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=406779e011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=406779e011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=406779e011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=43435 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=406779e011 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=43435 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=406779e011 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=902 identity=43435 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=endpoint level=info msg="Successful endpoint creation" containerID=406779e011 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=902 identity=43435 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=406779e011 endpointID=902 k8sNamespace=openstack k8sPodName=glance-db-sync-6897x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=cd01ccc0-a966-4a10-b1e8-08765957a8e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=406779e011 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=902 identity=43435 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/glance-db-sync-6897x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 d212f532-a2e6-4902-8540-0904d73dc29a default }" containerID=2a41168198d8ca71bb45f7a71f85a5b9c6e3c21c8efd0af2a04cf8ac1d66e3d9 datapathConfiguration="&{false false false false false }" interface=lxc43cd517720f9 k8sPodName=openstack/glance-rabbit-init-zwdl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a41168198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2831 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a41168198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2831 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a41168198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2831 identity=48334 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a41168198 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2831 identity=48334 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2a41168198 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2831 identity=48334 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a41168198 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2831 identity=48334 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a41168198 endpointID=2831 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zwdl6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ab3bd5d7-44c3-4e73-85bd-d6c9f67c10c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2a41168198 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2831 identity=48334 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/glance-rabbit-init-zwdl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 eb140f30-9ab5-42c5-8aba-afc9961db7da default }" containerID=141c6aaa3674d0d48c3e249bd107e087d8cc6e147d627ba0421b90407c7dab00 datapathConfiguration="&{false false false false false }" interface=lxc5a5f4a908ddf k8sPodName=openstack/glance-ks-service-qfl7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=141c6aaa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=141c6aaa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=141c6aaa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=6026 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=141c6aaa36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=6026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=141c6aaa36 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2985 identity=6026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=141c6aaa36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2985 identity=6026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 857b7fbf-3463-48e3-b096-daabba2a4ed0 default }" containerID=a5595b9ce2cffc8ddd8970d87861fd7cb9772525caadebe12944ee62d8976990 datapathConfiguration="&{false false false false false }" interface=lxcd065fedd88f9 k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5595b9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5595b9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5595b9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=15649 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5595b9ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=15649 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 c6053164-5526-450d-a980-fa616418c073 default }" containerID=e1ba0ab401b1c7dbed63b5280401af8228ebf8de4114f96fa4c1ce83e1ffc31a datapathConfiguration="&{false false false false false }" interface=lxca43788325642 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1ba0ab401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1ba0ab401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1ba0ab401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identity=5997 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1ba0ab401 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2286 identity=5997 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5595b9ce2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=39 identity=15649 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5595b9ce2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=39 identity=15649 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-vdl9j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1ba0ab401 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2286 identity=5997 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1ba0ab401 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2286 identity=5997 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-xg99b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=141c6aaa36 endpointID=2985 k8sNamespace=openstack k8sPodName=glance-ks-service-qfl7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=ce4d7d9f-86aa-4e2b-955b-1fac1a4de198 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=141c6aaa36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2985 identity=6026 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/glance-ks-service-qfl7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 6cecc342-aed9-4b8a-9056-232010a9a966 default }" containerID=7a9993bd78baf6b0ed2d662c079deb61e4501cb8c47035bb593e4fbadaec48eb datapathConfiguration="&{false false false false false }" interface=lxce1f1055fc659 k8sPodName=openstack/glance-ks-endpoints-kqtb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a9993bd78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a9993bd78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bb50dd45-456a-4275-9c8a-95904926300d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bb50dd45-456a-4275-9c8a-95904926300d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bb50dd45-456a-4275-9c8a-95904926300d;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=bb50dd45-456a-4275-9c8a-95904926300d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a9993bd78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=24594 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bb50dd45-456a-4275-9c8a-95904926300d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=bb50dd45-456a-4275-9c8a-95904926300d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a9993bd78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=24594 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a9993bd78 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=268 identity=24594 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a9993bd78 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=268 identity=24594 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 4fcd2904-a5f6-42e3-8c3d-942386c3a396 default }" containerID=7f69c8c26b84ce0426da5772acffd067b80707247d74e95b963056fe098d48e8 datapathConfiguration="&{false false false false false }" interface=lxc785d02a76ea5 k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f69c8c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f69c8c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Delete endpoint request" containerID=7a9993bd78 endpointID=268 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kqtb9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bb50dd45-456a-4275-9c8a-95904926300d k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=bb50dd45-456a-4275-9c8a-95904926300d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f69c8c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=17424 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f69c8c26b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1243 identity=17424 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Removed endpoint" containerID=7a9993bd78 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=268 identity=24594 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/glance-ks-endpoints-kqtb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f69c8c26b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1243 identity=17424 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f69c8c26b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1243 identity=17424 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 24cf8c33-d4e5-4916-9f53-6df8bb8774c7 default }" containerID=aca7970a18f97bd244a5d82c6037a5da775350c58501175ab92c65f21e295a91 datapathConfiguration="&{false false false false false }" interface=lxcb9ad20e1610d k8sPodName=openstack/glance-ks-user-vsj24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aca7970a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aca7970a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=314b0377-d272-44ad-a87c-afee01960b56,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=314b0377-d272-44ad-a87c-afee01960b56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=314b0377-d272-44ad-a87c-afee01960b56;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=314b0377-d272-44ad-a87c-afee01960b56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aca7970a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=24291 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=314b0377-d272-44ad-a87c-afee01960b56,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=314b0377-d272-44ad-a87c-afee01960b56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aca7970a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=24291 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aca7970a18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=265 identity=24291 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aca7970a18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=265 identity=24291 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=daemon level=info msg="Delete endpoint request" containerID=7f69c8c26b endpointID=1243 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-ldm9j subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=5357f2ef-7797-4517-a2b7-c76b290534b5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=7f69c8c26b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1243 identity=17424 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-ldm9j subsys=endpoint level=info msg="Delete endpoint request" containerID=aca7970a18 endpointID=265 k8sNamespace=openstack k8sPodName=glance-ks-user-vsj24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=314b0377-d272-44ad-a87c-afee01960b56 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=314b0377-d272-44ad-a87c-afee01960b56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aca7970a18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=265 identity=24291 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-user-vsj24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 9ec6c779-ad19-4b08-a452-cc88341cbc14 default }" containerID=53d4b8593a0359bd54807ab0eff73a76b463b5f7ceed80a51e5c5e68676b8b6e datapathConfiguration="&{false false false false false }" interface=lxc04aff6154307 k8sPodName=openstack/glance-metadefs-load-sckhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53d4b8593a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53d4b8593a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53d4b8593a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=27947 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53d4b8593a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=27947 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53d4b8593a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=570 identity=27947 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=53d4b8593a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=570 identity=27947 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53d4b8593a endpointID=570 k8sNamespace=openstack k8sPodName=glance-metadefs-load-sckhp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=68de0da5-60e9-43cf-a382-e23e2a38a026 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=53d4b8593a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=570 identity=27947 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-metadefs-load-sckhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 7185f330-5503-42d7-aca6-e7fbccb5427b default }" containerID=1e68bf0f873bd645c5d9fef2c44acffe41dfe12ef39443a6043269def639225f datapathConfiguration="&{false false false false false }" interface=lxcf4a0bceecab7 k8sPodName=openstack/glance-storage-init-hm4nd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e68bf0f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e68bf0f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e68bf0f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=19735 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e68bf0f87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1634 identity=19735 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e68bf0f87 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1634 identity=19735 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e68bf0f87 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1634 identity=19735 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=daemon level=info msg="Delete endpoint request" containerID=1e68bf0f87 endpointID=1634 k8sNamespace=openstack k8sPodName=glance-storage-init-hm4nd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=4a629a88-47d2-4eda-a09a-ec5198d134da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1e68bf0f87 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1634 identity=19735 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-hm4nd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 0c30090c-3a6d-425a-be0f-3a32373321f9 default }" containerID=dbeb4b3583fdf3729d6759321a77536eaed8ef2d7979466249276ad39d324492 datapathConfiguration="&{false false false false false }" interface=lxcae06b5d3586b k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbeb4b3583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbeb4b3583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbeb4b3583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=11532 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbeb4b3583 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=11532 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dbeb4b3583 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1368 identity=11532 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbeb4b3583 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1368 identity=11532 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/glance-api-cd4fd9dd5-6bqs4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 d12fd310-23d7-4d8b-b6de-f3497e746c3d default }" containerID=dd5c34cae3a085fa9f3e7214abf21d1d7c70738d30f6cb585f6d93fbb846cea8 datapathConfiguration="&{false false false false false }" interface=lxcd97b45f96578 k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd5c34cae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd5c34cae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd5c34cae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identity=35379 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd5c34cae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2625 identity=35379 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.239 0c623639-0619-4db3-aaa8-8fab6e94407b default }" containerID=5e867220417e2993860929414293d71fc4a7ed46ee023388586812f5acff8ee5 datapathConfiguration="&{false false false false false }" interface=lxc94e29b1650b9 k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.88 3272bc63-af92-4659-8aec-70ff2a6b960d default }" containerID=b3768ed1d9872421957adab0c8369671535979d37ce9bf190890a24d3077281a datapathConfiguration="&{false false false false false }" interface=lxc78a60bad8b77 k8sPodName=openstack/staffeln-db-init-29vtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e86722041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk subsys=endpoint level=info msg="New endpoint" containerID=b3768ed1d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3768ed1d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5e86722041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b3768ed1d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=1601 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3768ed1d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=1601 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e86722041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=44525 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e86722041 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1217 identity=44525 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd5c34cae3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2625 identity=35379 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd5c34cae3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2625 identity=35379 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/staffeln-conductor-64ff754886-dnc4f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b3768ed1d9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=589 identity=1601 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3768ed1d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=589 identity=1601 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5e86722041 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1217 identity=44525 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e86722041 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1217 identity=44525 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-api-7c98ff69fc-g5skk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3768ed1d9 endpointID=589 k8sNamespace=openstack k8sPodName=staffeln-db-init-29vtd subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=95e0ba36-3ecf-41b2-833d-3502b63b0488 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=b3768ed1d9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=589 identity=1601 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/staffeln-db-init-29vtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 d19419ed-dd65-40e4-b4bc-9fd77883eaad default }" containerID=f0b7a15f6da6e9fbb0775e39f0d6d0a0bd62c9763ac98b74658f92af203e676f datapathConfiguration="&{false false false false false }" interface=lxce57299f44487 k8sPodName=openstack/staffeln-db-sync-9vdqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0b7a15f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0b7a15f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0b7a15f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=7090 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=5ff1de2d-c52d-4e5f-8a11-8140b9f41c17,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0b7a15f6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3719 identity=7090 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0b7a15f6d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3719 identity=7090 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0b7a15f6d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3719 identity=7090 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/staffeln-db-sync-9vdqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager