level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=2.207692ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="152.724µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=2.879288ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.74µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=93.8835ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="62.671µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.31µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="141.224µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="76.092µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="108.522µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="478.891µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.99µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.523131ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.230451ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="31.671µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.27µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="249.666µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="86.442µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="57.971µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=46.213368ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="174.944µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.95.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.500767ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.946057ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.383404ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.081µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.591µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.75µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="39.66µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="548.563µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="39.731µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="50.771µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="313.848µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.458504ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.032814ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.91µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.68µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.95 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.95 ipAddr.ipv6="" k8sNodeIP=199.204.45.95 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.95" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.230" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.95" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.95} {CiliumInternalIP 10.0.0.230}] 10.0.0.0/24 [] [] 10.0.0.26 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:38215" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.458931847s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="26.22µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.9µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="86.392µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="15.641µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.387193733s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.204 38db159c-04fc-473a-be49-a67a14f5e612 default }" containerID=fb5b8304031b089c262ecbacdd874d1126353301cf662636a065f6d144faea84 datapathConfiguration="&{false false false false false }" interface=lxc22781ba17466 k8sPodName=kube-system/coredns-7c96b6546b-8s9vl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb5b830403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb5b830403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb5b830403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identity=26275 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb5b830403 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3353 identity=26275 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 9395123b-1c4f-441f-bf00-1456dc231d24 default }" containerID=6c40c429a18849c6c0f1faec54d5df6934d369606cb335649c561e6738165bd4 datapathConfiguration="&{false false false false false }" interface=lxc1e2df073c9e8 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c40c429a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c40c429a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c40c429a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=25402 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c40c429a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=25402 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=299.666626ms file-path=/var/run/cilium/state/templates/f10c9bf29ba852a1dc0f8d9ffb1cb46e6f0867f550a961919af7b3410db5ef82/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3588 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3082 identity=4 identityLabels="reserved:health" ipv4=10.0.0.26 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.042972078s file-path=/var/run/cilium/state/templates/8925e5cbd35a2cdabfbb2099ec544e0b10353b011d473cc8b2164e23d43308f4/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=fb5b830403 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3353 identity=26275 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb5b830403 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3353 identity=26275 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6c40c429a1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1683 identity=25402 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c40c429a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1683 identity=25402 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3082 identity=4 ipv4=10.0.0.26 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c40c429a1 endpointID=1683 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-bk7lf subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=68676da5-98cf-456a-84ce-3aac5c9e3a80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=6c40c429a1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1683 identity=25402 ipv4=10.0.0.116 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-bk7lf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 b3246e61-2ac6-4f5a-a4ba-554a0091bd8a default }" containerID=cc0baeeea66a8ea1a9d67b5a05e533201036f627ad5baa45e16ee9b9a81aa9eb datapathConfiguration="&{false false false false false }" interface=lxc3bc5ca678d42 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identity=30053 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1879 identity=30053 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc0baeeea6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1879 identity=30053 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc0baeeea6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1879 identity=30053 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lc2nl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3588 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03588 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03588 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03588 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03588:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3588 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 d1355c59-d068-4e9e-a50f-54605d24fb52 default }" containerID=0dd95119f9903b629a350418afeeaa4c4edced4b5ee251a5106de3414b94805f datapathConfiguration="&{false false false false false }" interface=lxca0be6501ffb8 k8sPodName=kube-system/coredns-67659f764b-6xpr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dd95119f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dd95119f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0dd95119f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=26275 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0dd95119f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1633 identity=26275 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 c9408454-ca4a-4106-88f8-ef5f15e8fa06 default }" containerID=01dbaea8dc981913a52c6f9b363c968624649a4c96c0d970e8d3133fc0d2363f datapathConfiguration="&{false false false false false }" interface=lxc151c14d3211d k8sPodName=kube-system/coredns-67659f764b-5cqhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01dbaea8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01dbaea8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=01dbaea8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=26275 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01dbaea8dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=26275 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01dbaea8dc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1522 identity=26275 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=01dbaea8dc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1522 identity=26275 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-67659f764b-5cqhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0dd95119f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1633 identity=26275 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dd95119f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1633 identity=26275 ipv4=10.0.0.168 ipv6= k8sPodName=kube-system/coredns-67659f764b-6xpr4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.157 f01e0d9c-b77b-4666-915b-d10492391183 default }" containerID=ba5d97a36c4209dcbb61add019bc2b718b5c81065de4537888f9c0145af62f2a datapathConfiguration="&{false false false false false }" interface=lxc5518f6300b9f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=42412 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1738 identity=42412 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba5d97a36c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1738 identity=42412 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba5d97a36c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1738 identity=42412 ipv4=10.0.0.157 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vzcfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb5b830403 endpointID=3353 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8s9vl subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=fb5b830403 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3353 identity=26275 ipv4=10.0.0.204 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8s9vl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 54898d87-9814-4509-a581-0c037c25ae62 default }" containerID=73580282f641492453ef8ad268223e0aa2f32c73d7dd7e8a05e6639064bbb5c6 datapathConfiguration="&{false false false false false }" interface=lxc92562f2d76af k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 643a809b-b813-4b71-91bd-2c9f70dcbb04 default }" containerID=3d3735d5fa87b922dd195c9cf10a76eacd31b7cac23b8c6ddf26f92cb9f9894c datapathConfiguration="&{false false false false false }" interface=lxc99ed697c4609 k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=19616 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2588 identity=19616 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv subsys=endpoint level=info msg="Invalid state transition skipped" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=11983 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1746 identity=11983 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d3735d5fa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2588 identity=19616 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d3735d5fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2588 identity=19616 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tv4tv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73580282f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1746 identity=11983 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=73580282f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1746 identity=11983 ipv4=10.0.0.101 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-j9jjj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 2100f20c-4e17-47ff-aa6b-5d3866514ed7 default }" containerID=6bcb70bae4c6cb53eda791e51e3d2a101792b714990aba031ba8cea3efd9f361 datapathConfiguration="&{false false false false false }" interface=lxcf4f404f9da4f k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bcb70bae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bcb70bae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bcb70bae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=44938 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bcb70bae4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1628 identity=44938 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bcb70bae4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1628 identity=44938 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bcb70bae4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1628 identity=44938 ipv4=10.0.0.246 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssxv6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 20b5d2a9-1263-442c-b9c5-88fdae91c16a default }" containerID=dd2422fc8c6bc8ab96c6e78e1aa00e4c601e658d1cca7e32512185d4d8fd1561 datapathConfiguration="&{false false false false false }" interface=lxc136fa4a21939 k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd2422fc8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd2422fc8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd2422fc8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=50941 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd2422fc8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3797 identity=50941 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd2422fc8c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3797 identity=50941 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd2422fc8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3797 identity=50941 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd2422fc8c endpointID=3797 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-9gpjz subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b7308d54-002d-4ac4-b256-77e64cabcf89 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=dd2422fc8c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3797 identity=50941 ipv4=10.0.0.62 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-9gpjz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 e2b0cfcf-73a8-488b-9bdd-3d8bed42b199 default }" containerID=d080e73bb76b758d2b731cb745cfbed28f62caa509396a893c48b57a7298737d datapathConfiguration="&{false false false false false }" interface=lxc636f5cd52520 k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d080e73bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d080e73bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d080e73bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=7975 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d080e73bb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=7975 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d080e73bb7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=516 identity=7975 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d080e73bb7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=7975 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d080e73bb7 endpointID=516 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bqfmc subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=dc46111b-6cc7-48d6-b648-95b79037831b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d080e73bb7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=7975 ipv4=10.0.0.62 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bqfmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 2687c0f0-7eee-4673-8e21-5a983f5045b3 default }" containerID=ef6b61d518040d90f172685951abac1e0967518c5731209cff92b56405ce1397 datapathConfiguration="&{false false false false false }" interface=lxc4af5adcf69bc k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef6b61d518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef6b61d518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ef6b61d518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=45207 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef6b61d518 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=45207 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef6b61d518 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=788 identity=45207 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef6b61d518 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=788 identity=45207 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sfnn8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 fee7ff98-9f20-4c56-89eb-cb4a5458a0db default }" containerID=5dc9d9a4af63528673e0426ba8eaaa10e8b66a3e82be0599f9d750d50190427e datapathConfiguration="&{false false false false false }" interface=lxc510169368ae6 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5dc9d9a4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5dc9d9a4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=619b359d-e023-40f7-93e2-b59198807482,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=619b359d-e023-40f7-93e2-b59198807482,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=619b359d-e023-40f7-93e2-b59198807482;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=619b359d-e023-40f7-93e2-b59198807482;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5dc9d9a4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=22965 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=619b359d-e023-40f7-93e2-b59198807482,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=619b359d-e023-40f7-93e2-b59198807482,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5dc9d9a4af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=22965 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5dc9d9a4af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2400 identity=22965 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=5dc9d9a4af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2400 identity=22965 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5dc9d9a4af endpointID=2400 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-mm5sw subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=619b359d-e023-40f7-93e2-b59198807482 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=619b359d-e023-40f7-93e2-b59198807482 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5dc9d9a4af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2400 identity=22965 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mm5sw subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4dff1d31-2d88-48b3-abaf-46585c6da1bf] Description:}]" policyAddRequest=bf4f2ecb-4e3a-4567-a86a-29fd6ba9897d subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=bf4f2ecb-4e3a-4567-a86a-29fd6ba9897d policyRevision=2 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=37afe883-be2b-4865-be05-2be07f5dab9a] Description:}]" policyAddRequest=baf515dc-faeb-44f0-b6f0-240f8595137e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=baf515dc-faeb-44f0-b6f0-240f8595137e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.138 0aee0be6-6585-49ed-b67e-cd031b107c14 default }" containerID=12d69311868d2de72c6889b120d9a954c1bcdc376a981f49da9987d575c3f8d4 datapathConfiguration="&{false false false false false }" interface=lxc902ea42d3590 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12d6931186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12d6931186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12d6931186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=3171 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=12d6931186 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=308 identity=3171 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12d6931186 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=308 identity=3171 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp subsys=endpoint level=info msg="Successful endpoint creation" containerID=12d6931186 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=308 identity=3171 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-9w8xp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 e2e38216-0eae-4dbf-aecc-74407bead69e default }" containerID=2560a2f2a8a37394d362879955952bc87c3186d2e8674fb0c0f232960ad2caef datapathConfiguration="&{false false false false false }" interface=lxc7651c573164a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2560a2f2a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2560a2f2a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2560a2f2a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=36920 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2560a2f2a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=665 identity=36920 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2560a2f2a8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=665 identity=36920 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl subsys=endpoint level=info msg="Successful endpoint creation" containerID=2560a2f2a8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=665 identity=36920 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jn9xl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.24 aeeee664-c1c1-4537-bf5b-a4595e396526 default }" containerID=9b36f861d609f94770cd5a317b999e0fadd18c86189126a963b8025a95f462b5 datapathConfiguration="&{false false false false false }" interface=lxcf67df2e75d2e k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identity=20816 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2276 identity=20816 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b36f861d6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2276 identity=20816 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b36f861d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2276 identity=20816 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-l97wt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.142 afc382c1-b3dd-4e54-bd11-c676095c4840 default }" containerID=2294d44bccb7b6805686299f184c1c2c333a3f5c524a88b7502c847e341197bd datapathConfiguration="&{false false false false false }" interface=lxccff128dd1ce3 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=52160 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=179 identity=52160 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2294d44bcc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=179 identity=52160 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2294d44bcc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=179 identity=52160 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.217 b11a466c-4847-47bf-8c04-ee3790978f04 default }" containerID=c87216f3d66ac9a9014f04ea3d747f87d9b96b84572e61563e231d4c6ce9873c datapathConfiguration="&{false false false false false }" interface=lxcf42209a9d61d k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c87216f3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c87216f3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c87216f3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c87216f3d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3150 identity=4573 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c87216f3d6 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3150 identity=4573 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c87216f3d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3150 identity=4573 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c87216f3d6 endpointID=3150 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c87216f3d6 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3150 identity=4573 ipv4=10.0.0.217 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8e163af5-8bc0-424e-8b28-ae88152602c6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 6bf500b6-0ee8-4f6c-b026-23e7c633488a default }" containerID=0bffdbe433e0c14bd739837c1fc084fa0bf0fae8fe6227f92bb8c575dea264e3 datapathConfiguration="&{false false false false false }" interface=lxcf9f287334c59 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bffdbe433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bffdbe433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bffdbe433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=7561 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bffdbe433 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1362 identity=7561 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0bffdbe433 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1362 identity=7561 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bffdbe433 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1362 identity=7561 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4f496624-03d2-4a06-9654-8eb39a6a1d29] Description:}]" policyAddRequest=6bf95b0d-60ff-45dc-a8cc-b9156d46c543 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=6bf95b0d-60ff-45dc-a8cc-b9156d46c543 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.6 87595937-1813-4c69-b3ce-9b2ab3584199 default }" containerID=91c71cf8d83a5501e2bc99fcb1ec0503985a53f1cc0f86b7bde304cb06038f24 datapathConfiguration="&{false false false false false }" interface=lxce4368286f1d1 k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91c71cf8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91c71cf8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91c71cf8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91c71cf8d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1447 identity=4573 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91c71cf8d8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1447 identity=4573 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=91c71cf8d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1447 identity=4573 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=daemon level=info msg="Delete endpoint request" containerID=91c71cf8d8 endpointID=1447 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=91c71cf8d8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1447 identity=4573 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-385ceea1-1396-4def-b103-4e6b2ea9bf97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 a9ea93b3-6532-47c3-a178-34e4e6131bd3 default }" containerID=da8b2fc0723ed3fde9ee90aead14b2ee38729a7f8bf917511bc05e536a481b13 datapathConfiguration="&{false false false false false }" interface=lxc937512c71f51 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da8b2fc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da8b2fc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da8b2fc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=51429 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=da8b2fc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3414 identity=51429 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da8b2fc072 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3414 identity=51429 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da8b2fc072 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3414 identity=51429 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a03ccd1e-a980-4ecf-9aa4-34a621802524] Description:}]" policyAddRequest=b72da83a-ff6c-4b59-8ad0-43713d6a7664 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b72da83a-ff6c-4b59-8ad0-43713d6a7664 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 34ae5669-57ef-4723-9819-73770ba69623 default }" containerID=9601bbe84d29cfbed657d26678adb2633630ad05bc27a303ecaf28f68e6823e4 datapathConfiguration="&{false false false false false }" interface=lxc6c3abb5cc732 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9601bbe84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9601bbe84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9601bbe84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=9000 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9601bbe84d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2555 identity=9000 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9601bbe84d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2555 identity=9000 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9601bbe84d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2555 identity=9000 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009681848309819146 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.59 3736cf84-67cc-4183-96c5-29864a0109e4 default }" containerID=01b9a633565b9481d519251260dd32f25ef2cc99f0e408573cb4b73261b1fe81 datapathConfiguration="&{false false false false false }" interface=lxc4c0717ac0e47 k8sPodName=monitoring/node-feature-discovery-worker-64jlt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01b9a63356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01b9a63356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=01b9a63356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=14767 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01b9a63356 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=14767 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 9bdc56ab-695c-4d5f-8948-13f59954c465 default }" containerID=2ca075f073d1f36b3be6924c900b4ca61eadbbd4ad43040df27f8a7caf18eff4 datapathConfiguration="&{false false false false false }" interface=lxc8b036e8871e3 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ca075f073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ca075f073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ca075f073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=21027 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ca075f073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1249 identity=21027 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01b9a63356 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2355 identity=14767 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt subsys=endpoint level=info msg="Successful endpoint creation" containerID=01b9a63356 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2355 identity=14767 ipv4=10.0.0.59 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-64jlt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 09aab552-57ba-4e97-bac3-ed46ae4c3be3 default }" containerID=69ac4cb8dbd572b8f60323d4c04e357ec5300cb0752c0de83307a64fb034b156 datapathConfiguration="&{false false false false false }" interface=lxc532dd2e6b564 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69ac4cb8db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69ac4cb8db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69ac4cb8db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=8059 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69ac4cb8db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=8059 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ca075f073 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1249 identity=21027 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ca075f073 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1249 identity=21027 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-zq9rr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=69ac4cb8db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=726 identity=8059 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck subsys=endpoint level=info msg="Successful endpoint creation" containerID=69ac4cb8db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=726 identity=8059 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-q6fck subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 c6250fcd-01df-4461-94dc-0344ddb6a5c6 default }" containerID=504a04a99d33665888ab587e4fa560e86703ee0b09314b8c6f27aa60afde6956 datapathConfiguration="&{false false false false false }" interface=lxc9d9d094ff080 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=504a04a99d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=504a04a99d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=504a04a99d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=5710 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=504a04a99d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=5710 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=504a04a99d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=5710 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr subsys=endpoint level=info msg="Successful endpoint creation" containerID=504a04a99d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=5710 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wl6xr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3588 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03588 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03588 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03588 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03588:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3588 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 f5d015d9-f7bd-4d8e-b62b-87e103d5c253 default }" containerID=d52078c81a7df94e6d95591197a4960574d877857e14f0f9f0ec6bd5dbde255c datapathConfiguration="&{false false false false false }" interface=lxc78b3da539307 k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d52078c81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d52078c81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d52078c81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=34340 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d52078c81a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=168 identity=34340 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d52078c81a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=168 identity=34340 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d52078c81a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=34340 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d52078c81a endpointID=168 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-s55sw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=a43f305e-2786-45ff-b3c0-37765e5547f3 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d52078c81a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=168 identity=34340 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-s55sw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 ca10e103-0a01-4c81-8a30-badc4fa8b005 default }" containerID=def20f2e7d01917e2c2bd374873a60ceff83415ff39fc85b7a5685bcdbfe96ff datapathConfiguration="&{false false false false false }" interface=lxc2e369aa1cbd9 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=def20f2e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=def20f2e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=def20f2e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=47952 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=def20f2e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3242 identity=47952 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=def20f2e7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3242 identity=47952 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv subsys=endpoint level=info msg="Successful endpoint creation" containerID=def20f2e7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3242 identity=47952 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-tjjtv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 08cb61de-494f-49aa-836d-a74782764a65 default }" containerID=4ed5dc83e1661fbb146fc964dde83861a65380a8f759e472270bc729219cb3d0 datapathConfiguration="&{false false false false false }" interface=lxcc7258f42f1b0 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ed5dc83e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ed5dc83e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ed5dc83e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identity=38113 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ed5dc83e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2874 identity=38113 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ed5dc83e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2874 identity=38113 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ed5dc83e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2874 identity=38113 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-v5j7r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.77 fb433c3b-fb74-4d6d-8e6b-fb517016e482 default }" containerID=ffddf1ff48a5864fb14d565d26a29f275724ff770f746fb29a2e2baa824d8d21 datapathConfiguration="&{false false false false false }" interface=lxc5ce65faa1e24 k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffddf1ff48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffddf1ff48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffddf1ff48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=17314 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffddf1ff48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1186 identity=17314 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffddf1ff48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1186 identity=17314 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffddf1ff48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1186 identity=17314 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7b4b648c8-mbf9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 a4e4711d-d07e-43d5-b029-87feaba97c5f default }" containerID=1885cb52dff3ef4d91395f8470e39f0d349f18a669accd579c6eb032358a1bd7 datapathConfiguration="&{false false false false false }" interface=lxc9085353c45ed k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1885cb52df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1885cb52df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1885cb52df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=5308 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1885cb52df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=5308 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1885cb52df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=886 identity=5308 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1885cb52df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=5308 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 95d81a2d-1fd0-4217-b0c2-dbfd7c1880df default }" containerID=fbd46eb4bdc61e5038880821b3a2df03f05166c91fc0456561a7c8f8ba944673 datapathConfiguration="&{false false false false false }" interface=lxc3c74dbaecb72 k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbd46eb4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbd46eb4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbd46eb4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbd46eb4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=4573 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=endpoint level=info msg="Delete endpoint request" containerID=1885cb52df endpointID=886 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-m6489 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e0b03d49-a2b8-465f-b1d5-5ded4c4c9ee6 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1885cb52df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=5308 ipv4=10.0.0.254 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-m6489 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbd46eb4bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=898 identity=4573 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbd46eb4bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=898 identity=4573 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 3e708fb1-1072-4cf4-80af-e58fc359c472 default }" containerID=a6712407e0656906cc5a7592fcc7109fce51093048c66000de191169fa8f61bb datapathConfiguration="&{false false false false false }" interface=lxcadf684198be0 k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6712407e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6712407e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a6712407e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6712407e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1526 identity=4573 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6712407e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1526 identity=4573 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6712407e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=4573 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=daemon level=info msg="Delete endpoint request" containerID=a6712407e0 endpointID=1526 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=fbd46eb4bd endpointID=898 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a6712407e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1526 identity=4573 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3d15963d-1f04-459c-96fa-70ca956747b3 subsys=endpoint level=info msg="Removed endpoint" containerID=fbd46eb4bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=898 identity=4573 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a651e53-f920-4e2d-a035-6848151fe708 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 056134b6-34a9-4429-bcee-ba16e4aec2f8 default }" containerID=4a39c59ec6b7abd7c34b8348616762764cd248fa8dce22539fa99d33e66f7a5b datapathConfiguration="&{false false false false false }" interface=lxcf86de0a3f30c k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=20227 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1255 identity=20227 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a39c59ec6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1255 identity=20227 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a39c59ec6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1255 identity=20227 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 ea75560d-36d6-4aa5-8407-0cd030180c16 default }" containerID=abaad956001f15bb24cd476cd677cfc387fb07c8b0995102d8224873952c4d1e datapathConfiguration="&{false false false false false }" interface=lxc367031ba6ac1 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=abaad95600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=abaad95600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=abaad95600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=17323 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=abaad95600 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2585 identity=17323 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=abaad95600 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2585 identity=17323 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=abaad95600 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2585 identity=17323 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 52803e60-154a-4008-bfd9-3c01cbd4e4f7 default }" containerID=ad9a20d292bdc01b02094e7b4a2b65e67df65c16fa9ad14b48a45ce2d1b5eb88 datapathConfiguration="&{false false false false false }" interface=lxcc013d9e1834d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad9a20d292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 bdc34eeb-2058-4fdd-9ec4-568d18d38df0 default }" containerID=19c06c22196607470f4f90eae12a9a31fdbcb964d73586241f366979e2827976 datapathConfiguration="&{false false false false false }" interface=lxc351ee51a0b51 k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19c06c2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad9a20d292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=19c06c2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad9a20d292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identity=29652 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=ad9a20d292 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3769 identity=29652 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad9a20d292 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3769 identity=29652 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad9a20d292 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3769 identity=29652 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19c06c2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=24659 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19c06c2219 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=24659 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19c06c2219 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=106 identity=24659 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx subsys=endpoint level=info msg="Successful endpoint creation" containerID=19c06c2219 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=106 identity=24659 ipv4=10.0.0.113 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fx9rx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 d28cb634-c8c6-4faf-8a67-975fede4e8a8 default }" containerID=e242a26fd3748e06eec6f5ceead9fbc030b44b67576f26249d278a662c16d947 datapathConfiguration="&{false false false false false }" interface=lxc7cebe74da602 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e242a26fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e242a26fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e242a26fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=43270 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e242a26fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=759 identity=43270 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e242a26fd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=759 identity=43270 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e242a26fd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=759 identity=43270 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 f375b1ca-3923-4bd0-a4ef-bd5282fee872 default }" containerID=d7bdaf8833e3c3fa344ce2b4bf6e173e017e66f70ec84a80c65b6a93974ccd40 datapathConfiguration="&{false false false false false }" interface=lxc9c2da182ccf6 k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7bdaf8833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d7bdaf8833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7bdaf8833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7bdaf8833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=390 identity=4573 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 dae36b79-e545-44b9-bc8b-e4455ea5d931 default }" containerID=68d11bf6c03d2e45decb4ac357edb8a5b239629807b7afaff5cd114a9c41c938 datapathConfiguration="&{false false false false false }" interface=lxc92b8af471800 k8sPodName=monitoring/vector-nphln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68d11bf6c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68d11bf6c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68d11bf6c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=26047 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68d11bf6c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=588 identity=26047 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d7bdaf8833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=390 identity=4573 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7bdaf8833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=390 identity=4573 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68d11bf6c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=588 identity=26047 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln subsys=endpoint level=info msg="Successful endpoint creation" containerID=68d11bf6c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=588 identity=26047 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/vector-nphln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d7bdaf8833 endpointID=390 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d7bdaf8833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=390 identity=4573 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-01d9ce10-f928-4d23-8057-6dc93bc083df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 ebc52dd1-05f1-4288-a73c-9cfd3401eab8 default }" containerID=d49a7992051bfe33fa5e002118419b0dac55d8b9799554d3efbe546642c365a1 datapathConfiguration="&{false false false false false }" interface=lxc60a11a433dd9 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=25731 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=25731 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d49a799205 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1713 identity=25731 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d49a799205 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=25731 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-4lbc7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 3372cff7-1787-4942-acb1-61990cdc4e9a default }" containerID=7da4e616ca5d451aba66fa88d20a891b8ddac82c0c111ee8f43f7ef4ea260205 datapathConfiguration="&{false false false false false }" interface=lxc831fe81af9cb k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7da4e616ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7da4e616ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7da4e616ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=12396 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7da4e616ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=12396 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7da4e616ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=438 identity=12396 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7da4e616ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=438 identity=12396 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 f3d1fdc1-58e4-47e2-bf83-cff46e06ddfa default }" containerID=ecd649a9f596e248256d9d93057bacef5bf359f56220d8631d5db03795d0f4dd datapathConfiguration="&{false false false false false }" interface=lxccb277e0c4acd k8sPodName=openstack/memcached-memcached-6479589586-2dwhw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecd649a9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecd649a9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecd649a9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identity=2613 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecd649a9f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2490 identity=2613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecd649a9f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2490 identity=2613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecd649a9f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2490 identity=2613 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2dwhw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 5a5427f5-1a81-43b1-be0a-06cd3df026b7 default }" containerID=3da092e24f6c5b14d558a7bb0386878e951ce1e7665cbb81cbb5b6d3f87ad79a datapathConfiguration="&{false false false false false }" interface=lxc3ce7954b9369 k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3da092e24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3da092e24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3da092e24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3da092e24f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=4573 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3da092e24f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3600 identity=4573 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3da092e24f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3600 identity=4573 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=daemon level=info msg="Delete endpoint request" containerID=3da092e24f endpointID=3600 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3da092e24f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3600 identity=4573 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71eeda85-2a54-4f81-8e46-08af30a70539 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 a7335296-2cb7-4a2c-8056-4bb2835b5e25 default }" containerID=7e632d891b62e8d6a7e64b5d4dfb718cacf2c3beb169f61734dbbd4dfd68fceb datapathConfiguration="&{false false false false false }" interface=lxce2cec8aa2bac k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e632d891b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e632d891b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e632d891b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=24706 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e632d891b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=223 identity=24706 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e632d891b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=223 identity=24706 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e632d891b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=223 identity=24706 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.206 e66c9b2f-0d54-454c-8622-c3b2fb3d5234 default }" containerID=1c9ba172025e232a879d9efaf9981b089d55d45a7533fe95a55696fab1b9070e datapathConfiguration="&{false false false false false }" interface=lxccfa2c9c09081 k8sPodName=openstack/keystone-api-868954b47d-5sntx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c9ba17202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c9ba17202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c9ba17202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=41931 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1c9ba17202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=546 identity=41931 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 58a37146-dcd1-4874-9095-ddaadfe13446 default }" containerID=5e4c9c47e283642ef96537ec803eff68cd769b370aa8a7dd331d1b56ee8424fe datapathConfiguration="&{false false false false false }" interface=lxc71c0c2cc8831 k8sPodName=openstack/keystone-credential-setup-csb87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e4c9c47e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e4c9c47e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e4c9c47e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=16184 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e4c9c47e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=16184 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c9ba17202 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=546 identity=41931 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c9ba17202 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=546 identity=41931 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-api-868954b47d-5sntx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5e4c9c47e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1756 identity=16184 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e4c9c47e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1756 identity=16184 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5e4c9c47e2 endpointID=1756 k8sNamespace=openstack k8sPodName=keystone-credential-setup-csb87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3193c47b-6890-4520-abe1-a0ff59f0b28a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5e4c9c47e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1756 identity=16184 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-credential-setup-csb87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 c405f6ef-b9cb-4087-a583-5f222218fc99 default }" containerID=199e584bb47e0e9efc058e6cbc7c66c17da56a97d9da588af7994a4e90d163f5 datapathConfiguration="&{false false false false false }" interface=lxcf02f732918f9 k8sPodName=openstack/keystone-db-init-gr2vf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=4495 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1373 identity=4495 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=199e584bb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1373 identity=4495 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=endpoint level=info msg="Successful endpoint creation" containerID=199e584bb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1373 identity=4495 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=199e584bb4 endpointID=1373 k8sNamespace=openstack k8sPodName=keystone-db-init-gr2vf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=bf2478cd-311f-4768-b88d-c88984bef37a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=199e584bb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1373 identity=4495 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-init-gr2vf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 a9785374-743a-4f7d-97d0-bdc2ffb4a610 default }" containerID=e39c50b61715165851e9d85ea846e1856820ab756420f906740dc754a6ec1d2a datapathConfiguration="&{false false false false false }" interface=lxcf7e0e60038d7 k8sPodName=openstack/keystone-fernet-setup-r4q72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e39c50b617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e39c50b617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e39c50b617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=1732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e39c50b617 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=358 identity=1732 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e39c50b617 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=358 identity=1732 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e39c50b617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=1732 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e39c50b617 endpointID=358 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-r4q72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a4447e02-d83b-48a8-ba09-cb1f55ef8d20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e39c50b617 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=358 identity=1732 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/keystone-fernet-setup-r4q72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 ad871d96-ae40-49ec-a413-77b7fbcfe670 default }" containerID=6ebe53231d38eb40346db5062803887dcbba0edc8193f58b5824ad3899d995d0 datapathConfiguration="&{false false false false false }" interface=lxcd58fd31b5d64 k8sPodName=openstack/keystone-db-sync-t766g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ebe53231d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ebe53231d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ebe53231d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=15327 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ebe53231d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=425 identity=15327 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6ebe53231d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=425 identity=15327 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ebe53231d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=15327 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6ebe53231d endpointID=425 k8sNamespace=openstack k8sPodName=keystone-db-sync-t766g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0517e0f3-e5cd-4551-a760-bebdf3efe643 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6ebe53231d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=425 identity=15327 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-db-sync-t766g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 414ef3b5-a40a-44f9-a427-200f71e3095c default }" containerID=4d1601fd833b2b8bb7a5268db2f0086c624450a06aecb518bc50781f66c57451 datapathConfiguration="&{false false false false false }" interface=lxc85db289f2027 k8sPodName=openstack/keystone-rabbit-init-7lck8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=2931 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1568 identity=2931 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d1601fd83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1568 identity=2931 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d1601fd83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=2931 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d1601fd83 endpointID=1568 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-7lck8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=42e48ff3-3ee5-4703-a6d1-9e4500e9c8db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4d1601fd83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1568 identity=2931 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-rabbit-init-7lck8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 daea3673-22f6-492a-899e-c6f3f7a30e6a default }" containerID=2d6c37038cb03517824862f38ba10c856be0f66ebde29a8b0d6a408771fc21cf datapathConfiguration="&{false false false false false }" interface=lxcacf58740e5b9 k8sPodName=openstack/keystone-domain-manage-lrpc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d6c37038c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d6c37038c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d6c37038c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=2119 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d6c37038c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1984 identity=2119 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d6c37038c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1984 identity=2119 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d6c37038c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1984 identity=2119 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=daemon level=info msg="Delete endpoint request" containerID=2d6c37038c endpointID=1984 k8sNamespace=openstack k8sPodName=keystone-domain-manage-lrpc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ff743f4d-e738-4831-8a1c-cf7142f2162f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2d6c37038c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1984 identity=2119 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/keystone-domain-manage-lrpc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 591352dd-5d18-4fb1-af12-cec465e15778 default }" containerID=1883772a7ab227f5c6345cc92a14f0190dc05a5f0bda4042f870899efdb23620 datapathConfiguration="&{false false false false false }" interface=lxc8c523c97b06c k8sPodName=openstack/keystone-bootstrap-wxs9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1883772a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1883772a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=555d6b33-43b1-421e-9267-8f71150637df,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=555d6b33-43b1-421e-9267-8f71150637df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=555d6b33-43b1-421e-9267-8f71150637df;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=555d6b33-43b1-421e-9267-8f71150637df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1883772a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=28983 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=555d6b33-43b1-421e-9267-8f71150637df,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=555d6b33-43b1-421e-9267-8f71150637df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1883772a7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=28983 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1883772a7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=28983 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=1883772a7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=28983 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1883772a7a endpointID=487 k8sNamespace=openstack k8sPodName=keystone-bootstrap-wxs9d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=555d6b33-43b1-421e-9267-8f71150637df k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=555d6b33-43b1-421e-9267-8f71150637df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1883772a7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=28983 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/keystone-bootstrap-wxs9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 69b968bb-9f2d-480a-a4b7-c7034217f369 default }" containerID=f43b3a1703f2d6b8f8b0e7f8c32f85e828c6ecc7bd0ec62347fd7b7df7d9ff17 datapathConfiguration="&{false false false false false }" interface=lxc82ae1441f50a k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f43b3a1703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f43b3a1703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f43b3a1703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f43b3a1703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1731 identity=4573 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f43b3a1703 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1731 identity=4573 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=endpoint level=info msg="Successful endpoint creation" containerID=f43b3a1703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1731 identity=4573 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=daemon level=info msg="Delete endpoint request" containerID=f43b3a1703 endpointID=1731 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f43b3a1703 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1731 identity=4573 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-eae85861-6dec-4548-8e32-2a13e69ef10b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 397ed4c4-a0ff-4886-9321-512216cc649b default }" containerID=31ee1c5b326250f6daf04be78730a9531e5e75774c2dc5213a8bb7b94cca9c45 datapathConfiguration="&{false false false false false }" interface=lxc68a6df691750 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31ee1c5b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31ee1c5b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31ee1c5b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=32451 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=31ee1c5b32 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=73 identity=32451 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31ee1c5b32 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=73 identity=32451 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=31ee1c5b32 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=73 identity=32451 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 5d148437-4787-478b-b792-6d0b0dc76e99 default }" containerID=9e71fd131d296e4102c4e1a15c9399256f6f768ae9721280444ec0251ff6da1c datapathConfiguration="&{false false false false false }" interface=lxc7d64b97eabf2 k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e71fd131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e71fd131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e71fd131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=7834 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e71fd131d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=7834 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9e71fd131d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2397 identity=7834 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e71fd131d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2397 identity=7834 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/barbican-api-5dfc56cfdb-6px2t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.62 9dffa579-f8d1-4ac6-bfa1-80a011cbebc5 default }" containerID=ab4f67bf51d469ca5f22181824835493ff7af22a29d877f766bdb67cf2d22ad8 datapathConfiguration="&{false false false false false }" interface=lxce44e71eca6a0 k8sPodName=openstack/barbican-db-init-hm4m8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab4f67bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab4f67bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab4f67bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=15459 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab4f67bf51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=15459 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab4f67bf51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=244 identity=15459 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab4f67bf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=15459 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ab4f67bf51 endpointID=244 k8sNamespace=openstack k8sPodName=barbican-db-init-hm4m8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9c0b601e-1003-464a-8cc2-448d13d961b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ab4f67bf51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=15459 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/barbican-db-init-hm4m8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 d65d5626-bc6e-4dda-bc66-7e1a9335e2ad default }" containerID=169ed1328b42277f09c81cc762eed3fc085bfab4ad1b9d0e4643a094db9c3735 datapathConfiguration="&{false false false false false }" interface=lxc6ca35c4c3711 k8sPodName=openstack/barbican-db-sync-6rhz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=169ed1328b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=169ed1328b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=169ed1328b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=42373 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=169ed1328b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2338 identity=42373 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=169ed1328b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2338 identity=42373 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=169ed1328b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2338 identity=42373 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=169ed1328b endpointID=2338 k8sNamespace=openstack k8sPodName=barbican-db-sync-6rhz8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=d5c6a7ce-b23d-4222-b64f-579a33f8bd9d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=169ed1328b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2338 identity=42373 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-6rhz8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 cce0fb12-3b09-4ed8-b3b3-fb96963534d9 default }" containerID=2d05af3f86fe76a929c11f89c0985083c0c938e265fc3acb6224a1f12feeac38 datapathConfiguration="&{false false false false false }" interface=lxc341ae523e1a3 k8sPodName=openstack/barbican-rabbit-init-m6xcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=24724 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=24724 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d05af3f86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=24724 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d05af3f86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=24724 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036133618299132926 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=2d05af3f86 endpointID=900 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-m6xcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=be79dac3-db4f-4f16-b3ab-29d663af2e4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2d05af3f86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=24724 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-m6xcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 d28ea227-c90a-4940-b3ed-97e8e01b0ed0 default }" containerID=68e36d8f4fef573d96ecca54427a8488a6de944ff2b6c5ecf95f11de349b29c1 datapathConfiguration="&{false false false false false }" interface=lxcd82f92b64a0e k8sPodName=openstack/barbican-ks-service-fv722 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6c17f2c-b040-407a-9613-a6956516645f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b6c17f2c-b040-407a-9613-a6956516645f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b6c17f2c-b040-407a-9613-a6956516645f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=b6c17f2c-b040-407a-9613-a6956516645f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=29985 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b6c17f2c-b040-407a-9613-a6956516645f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=b6c17f2c-b040-407a-9613-a6956516645f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3232 identity=29985 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68e36d8f4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3232 identity=29985 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68e36d8f4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=29985 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68e36d8f4f endpointID=3232 k8sNamespace=openstack k8sPodName=barbican-ks-service-fv722 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b6c17f2c-b040-407a-9613-a6956516645f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=b6c17f2c-b040-407a-9613-a6956516645f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=68e36d8f4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3232 identity=29985 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-ks-service-fv722 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 4b909a72-777e-4561-96b8-1c1bea8dd12e default }" containerID=26c8aad38f0242921c0362828e4c7dbbb2be9fbe935c0aca0f05c3ca2ce3cb46 datapathConfiguration="&{false false false false false }" interface=lxce462d581544b k8sPodName=openstack/barbican-ks-endpoints-rs7tg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26c8aad38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26c8aad38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26c8aad38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=15161 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26c8aad38f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3522 identity=15161 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=26c8aad38f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3522 identity=15161 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=endpoint level=info msg="Successful endpoint creation" containerID=26c8aad38f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3522 identity=15161 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26c8aad38f endpointID=3522 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rs7tg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2ef13d85-c50c-4be9-a193-3496571d1e49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=26c8aad38f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3522 identity=15161 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs7tg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 66f1ca57-ef47-4261-a90b-1644f3011e74 default }" containerID=103278557fdb68d1f32f48c1f295c9dc7b9aa6401f516731261674fdf209ca2b datapathConfiguration="&{false false false false false }" interface=lxc0cdc50ecb538 k8sPodName=openstack/barbican-ks-user-z47nb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=103278557f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=103278557f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=103278557f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=16077 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=103278557f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=16077 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=103278557f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1188 identity=16077 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=endpoint level=info msg="Successful endpoint creation" containerID=103278557f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=16077 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=daemon level=info msg="Delete endpoint request" containerID=103278557f endpointID=1188 k8sNamespace=openstack k8sPodName=barbican-ks-user-z47nb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=560244e5-5f9b-44b8-8784-52bf674a4bde k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=103278557f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=16077 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/barbican-ks-user-z47nb subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.238 a6306980-2234-4b6c-a51a-6994fcda1a3f default }" containerID=1fc867903566e78bd5a3b734f064da8b9dbef58fdac3421da097f65e5afd9d31 datapathConfiguration="&{false false false false false }" interface=lxca044e4000f4c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fc8679035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fc8679035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fc8679035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identity=40508 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fc8679035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3365 identity=40508 ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fc8679035 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3365 identity=40508 ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fc8679035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3365 identity=40508 ipv4=10.0.0.238 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-8p4kc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 e00c5163-7af1-40b2-8c39-bf346a80d98f default }" containerID=1b82e50569827272c8c7a0a1b365d47920e8de89ec83e373a875664649f66c14 datapathConfiguration="&{false false false false false }" interface=lxc12d485d5852a k8sPodName=openstack/rook-ceph-detect-version-8pzqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=55079 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2714 identity=55079 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b82e50569 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2714 identity=55079 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b82e50569 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=55079 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b82e50569 endpointID=2714 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8pzqk subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=36ca7d09-0925-4cc7-935f-02337f432ca0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=1b82e50569 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2714 identity=55079 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8pzqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 a0223e67-4571-480e-af91-79a5a840452b default }" containerID=b91805b19bb1e0f6b3e05890dec7a080a2ae3ce6145b9ac6cc0008c7f9553f7b datapathConfiguration="&{false false false false false }" interface=lxc8d6010cfdbae k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b91805b19b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b91805b19b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b91805b19b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=13098 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b91805b19b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=271 identity=13098 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b91805b19b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=271 identity=13098 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b91805b19b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=271 identity=13098 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=daemon level=info msg="Delete endpoint request" containerID=b91805b19b endpointID=271 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kj9zp subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=47f815ac-f81f-490e-97ef-4cf9577eb43f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b91805b19b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=271 identity=13098 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kj9zp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 dda8c3ce-abaa-43a9-86e6-4b56808511e1 default }" containerID=562b30fac339dc9845dde5bd931d7233e06d26a88bbbee2b3806d92b563a6e12 datapathConfiguration="&{false false false false false }" interface=lxcaed42c7dce41 k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=562b30fac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=562b30fac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=562b30fac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=4573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=562b30fac3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2673 identity=4573 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=562b30fac3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2673 identity=4573 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=endpoint level=info msg="Successful endpoint creation" containerID=562b30fac3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2673 identity=4573 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=daemon level=info msg="Delete endpoint request" containerID=562b30fac3 endpointID=2673 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=562b30fac3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2673 identity=4573 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83af6fbd-9354-4986-873e-05c80329a72b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.208 827ae621-6575-47d6-aaad-56924aa24f69 default }" containerID=5bf9afb0f3145dcf9763346f5772d9546097ac075f388e44376c01d4e19e6442 datapathConfiguration="&{false false false false false }" interface=lxc0054c1401e0b k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bf9afb0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bf9afb0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bf9afb0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=55249 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bf9afb0f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1791 identity=55249 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5bf9afb0f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1791 identity=55249 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bf9afb0f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1791 identity=55249 ipv4=10.0.0.208 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.163 5c83f8b2-ae38-4ea9-8b59-d56d0d72a407 default }" containerID=ad960564911827de94d168d3d46099d6273f430d652f10142283c79c8caf3de2 datapathConfiguration="&{false false false false false }" interface=lxcc97edaa1ebd2 k8sPodName=openstack/glance-db-init-dk8ll labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad96056491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad96056491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ad96056491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=20757 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad96056491 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=20757 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad96056491 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3288 identity=20757 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad96056491 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=20757 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ad96056491 endpointID=3288 k8sNamespace=openstack k8sPodName=glance-db-init-dk8ll subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5ddefe14-53f4-4639-bb98-39d9e23c1c52 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ad96056491 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=20757 ipv4=10.0.0.163 ipv6= k8sPodName=openstack/glance-db-init-dk8ll subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 ce8af06d-fe8a-4265-92ad-47141ba4382d default }" containerID=b2a716efe770f0f7fdf00163774235a324e86230a559e36dc287abb23160f8fa datapathConfiguration="&{false false false false false }" interface=lxcea318ea4d992 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=14967 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3494 identity=14967 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 46580bf1-e1f8-452f-bfbc-8ab63ced30d6 default }" containerID=a8915e296c9767f29477afe68140fc3ea0c8354938d0e773b23679c744656bff datapathConfiguration="&{false false false false false }" interface=lxc0a1524fb28a0 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8915e296c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8915e296c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8915e296c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=37215 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8915e296c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=145 identity=37215 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2a716efe7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3494 identity=14967 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2a716efe7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3494 identity=14967 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-hc6mm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8915e296c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=145 identity=37215 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8915e296c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=145 identity=37215 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-x6vfv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 530a9bb4-0d67-459c-b2d3-5bab3bfec45f default }" containerID=f73850a6db88e68a0e6662e34a1b4d16f19ed4979d645df8da11da05136fa722 datapathConfiguration="&{false false false false false }" interface=lxcfc1e0080e19f k8sPodName=openstack/glance-db-sync-wxqnc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f73850a6db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f73850a6db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f73850a6db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=11966 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f73850a6db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=11966 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f73850a6db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3117 identity=11966 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f73850a6db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=11966 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f73850a6db endpointID=3117 k8sNamespace=openstack k8sPodName=glance-db-sync-wxqnc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6e818813-7f3b-4cbb-85f7-2b886b554ad6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f73850a6db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=11966 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/glance-db-sync-wxqnc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 9568f7f4-e94d-4dd1-a645-afdc58ba7bab default }" containerID=006cddb4c86f2680821029d9ac015b7226fe2aeba35af4614ecb830ae0a2738a datapathConfiguration="&{false false false false false }" interface=lxcb90eff664237 k8sPodName=openstack/glance-rabbit-init-9fpqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=006cddb4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=006cddb4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=006cddb4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=10370 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=006cddb4c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=10370 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=006cddb4c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1491 identity=10370 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=006cddb4c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1491 identity=10370 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=006cddb4c8 endpointID=1491 k8sNamespace=openstack k8sPodName=glance-rabbit-init-9fpqp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=57ea9b66-6f3e-4341-8734-53dd065bc2de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=006cddb4c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1491 identity=10370 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-9fpqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 8f83a687-fc33-4c9e-a760-ed056d271f62 default }" containerID=87d6d4423ff3f7baa510b0fe73b478d6ad03ca49a81ddf0da5caaa22f6a00386 datapathConfiguration="&{false false false false false }" interface=lxc129106d80524 k8sPodName=openstack/glance-ks-service-8nzsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87d6d4423f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87d6d4423f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87d6d4423f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identity=17431 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87d6d4423f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2502 identity=17431 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87d6d4423f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2502 identity=17431 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=87d6d4423f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2502 identity=17431 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87d6d4423f endpointID=2502 k8sNamespace=openstack k8sPodName=glance-ks-service-8nzsr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b8c7c94d-1f46-4006-b2cb-3796138b9431 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=87d6d4423f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2502 identity=17431 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-ks-service-8nzsr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 40e55a45-27cb-496c-bcb3-8a2dda610463 default }" containerID=33cd8bf8d56ab59d51b0f7c559f41a995476a6e42bd83fcc07d6815d41219090 datapathConfiguration="&{false false false false false }" interface=lxc8c223c6c6b1d k8sPodName=openstack/glance-ks-endpoints-242hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33cd8bf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33cd8bf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33cd8bf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=15379 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33cd8bf8d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=15379 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=33cd8bf8d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=423 identity=15379 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=33cd8bf8d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=423 identity=15379 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=33cd8bf8d5 endpointID=423 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-242hn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f0288f38-8867-4c30-9abb-6f981a4de5d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=33cd8bf8d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=423 identity=15379 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-ks-endpoints-242hn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 1a4d0bca-3e28-44c0-9506-4d51f496cb6e default }" containerID=6f06314166e007cd5f11d1eb69dca66f4be65f9d90a40299eaa70491915fe38c datapathConfiguration="&{false false false false false }" interface=lxc09dde3c036d3 k8sPodName=openstack/glance-ks-user-nq9ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f06314166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f06314166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f06314166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=36607 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f06314166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=36607 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f06314166 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=36607 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f06314166 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=36607 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f06314166 endpointID=1078 k8sNamespace=openstack k8sPodName=glance-ks-user-nq9ln subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f317bcbf-d068-40bd-bdff-bfc35ed5e0aa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f06314166 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=36607 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/glance-ks-user-nq9ln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 9cfe997b-069e-4334-ae20-9ceea54677d7 default }" containerID=25c742a864d9c193fa1f789d21f2cc65582bcdac089e48c696cfec38f125d435 datapathConfiguration="&{false false false false false }" interface=lxc2c3568532c80 k8sPodName=openstack/glance-metadefs-load-xngl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25c742a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25c742a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25c742a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=54170 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=25c742a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1383 identity=54170 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25c742a864 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1383 identity=54170 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25c742a864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1383 identity=54170 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25c742a864 endpointID=1383 k8sNamespace=openstack k8sPodName=glance-metadefs-load-xngl5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=56bc5b5d-d108-4123-801e-0b5a970877ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=25c742a864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1383 identity=54170 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-metadefs-load-xngl5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 66cda597-d804-4d48-9df5-6ec72f237aa7 default }" containerID=0fc323643d638b6363806c923364ad7fb63810b08ec9ffed2da2a2ad86eb68b9 datapathConfiguration="&{false false false false false }" interface=lxc71602ed0848c k8sPodName=openstack/glance-storage-init-vbf85 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=16511 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=16511 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fc323643d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2251 identity=16511 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fc323643d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2251 identity=16511 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0fc323643d endpointID=2251 k8sNamespace=openstack k8sPodName=glance-storage-init-vbf85 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=350851f8-dfb3-41cd-82b9-1494b65db568 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0fc323643d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2251 identity=16511 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/glance-storage-init-vbf85 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 7412479b-5202-4a0a-a638-83a676fce32c default }" containerID=75e97ae1525933cec985ad94eaf3130ad633bf2e1082a75f1239edd70b258e8c datapathConfiguration="&{false false false false false }" interface=lxc3dcb7b1530dc k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75e97ae152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75e97ae152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=75e97ae152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=22991 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75e97ae152 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1024 identity=22991 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75e97ae152 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1024 identity=22991 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=75e97ae152 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1024 identity=22991 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/glance-api-575bbdbcc5-vvjgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.186 42a77934-53bb-4bd3-bade-19e06de4b758 default }" containerID=360eb484b4e32a2a58799c8813d4c2460ddba22fd6bd25fe4b145e5cb066c408 datapathConfiguration="&{false false false false false }" interface=lxc59d57e67b858 k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=360eb484b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=360eb484b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=360eb484b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=55569 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=360eb484b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=55569 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 f493a83f-67f3-4b2d-b59b-8b41432cb12f default }" containerID=3efb991dc74e5d02398c2f7000b250024ead173ed100413a86f2443ca5f742c1 datapathConfiguration="&{false false false false false }" interface=lxc4c993a4fe2c6 k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3efb991dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3efb991dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3efb991dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=42100 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3efb991dc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1121 identity=42100 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 fe91cca3-aea1-4bd1-b1c9-5a42f9c0e8df default }" containerID=ec71d9051c1de047251b5c864c4a7c85fe4e024edfd435cf96103d29d6782e28 datapathConfiguration="&{false false false false false }" interface=lxc7198f375b244 k8sPodName=openstack/staffeln-db-init-zv9md labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec71d9051c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec71d9051c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4e157782-1031-4063-8640-867882affa80,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4e157782-1031-4063-8640-867882affa80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4e157782-1031-4063-8640-867882affa80;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4e157782-1031-4063-8640-867882affa80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec71d9051c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=13248 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4e157782-1031-4063-8640-867882affa80,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4e157782-1031-4063-8640-867882affa80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec71d9051c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=13248 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=360eb484b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1505 identity=55569 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=360eb484b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1505 identity=55569 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/staffeln-conductor-575b84f98d-chxc9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3efb991dc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1121 identity=42100 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=3efb991dc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1121 identity=42100 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/staffeln-api-65cc9c87b7-j48lp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec71d9051c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1004 identity=13248 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec71d9051c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1004 identity=13248 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec71d9051c endpointID=1004 k8sNamespace=openstack k8sPodName=staffeln-db-init-zv9md subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4e157782-1031-4063-8640-867882affa80 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4e157782-1031-4063-8640-867882affa80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=ec71d9051c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1004 identity=13248 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/staffeln-db-init-zv9md subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 3c9d33a7-c689-4565-9434-c90006798f37 default }" containerID=6b9a5f22d8eaaba559bdc1ea0f2f8e4851cf444cf7cfd4603c9a8955772eeae3 datapathConfiguration="&{false false false false false }" interface=lxc8cdb714cc9f3 k8sPodName=openstack/staffeln-db-sync-rwdzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b9a5f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b9a5f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b9a5f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=22074 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=90abaf6c-85c0-49c1-86ea-d58f4894e1d0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6b9a5f22d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1078 identity=22074 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b9a5f22d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1078 identity=22074 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b9a5f22d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1078 identity=22074 ipv4=10.0.0.30 ipv6= k8sPodName=openstack/staffeln-db-sync-rwdzc subsys=daemon