level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="826.44µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="57.832µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="951.733µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.71µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.167248ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.401µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="15.51µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="59.501µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="59.041µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.342µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="863.703µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.98µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=55.117118ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.133439ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="47.361µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="52.282µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="388.96µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="77.142µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="55.751µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=117.403818ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="100.773µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.941µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.102.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.776057ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.691µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.823664ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.110664ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.42µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.25µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="61.312µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="269.267µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.39µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="225.015µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="822.652µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.22468ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.1µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="32.241µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.102 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.102 ipAddr.ipv6="" k8sNodeIP=199.204.45.102 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.102" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.35" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.102" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.102} {CiliumInternalIP 10.0.0.35}] 10.0.0.0/24 [] [] 10.0.0.1 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43101" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.550839115s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="37.19µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.24µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="42.921µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.33µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1538 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.853523179s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=309.557928ms file-path=/var/run/cilium/state/templates/d39d5b5dfa82179fb671723f0421b3ed1fe19f2f4ac412cae0812e27c00926b4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1538 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 ipv4=10.0.0.1 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 identityLabels="reserved:health" ipv4=10.0.0.1 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 identity=4 identityLabels="reserved:health" ipv4=10.0.0.1 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.111633283s file-path=/var/run/cilium/state/templates/6b3b200d3cf50087f015b745b5ae27fa95e73c70b26c853cfaa4c36bcf025b1e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2849 identity=4 ipv4=10.0.0.1 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 648d8e27-9e02-42e7-825b-915e043d413f default }" containerID=0e23886017750d14d2df95a3cc4c921d4e91fec87ee8baebd1d1a9156a46b3e2 datapathConfiguration="&{false false false false false }" interface=lxc19d14d144c54 k8sPodName=kube-system/coredns-7c96b6546b-chmb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e23886017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e23886017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e23886017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=14594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e23886017 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=14594 ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0e23886017 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1034 identity=14594 ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e23886017 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1034 identity=14594 ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.87 18781a08-20f3-4417-b037-81b2ee981c93 default }" containerID=bcff16e87ed13324c90bfdd27798292a068a3654f9b3cc1863fd885c3d9e858e datapathConfiguration="&{false false false false false }" interface=lxcf25d182470ae k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcff16e87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcff16e87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.137 15cb33f6-7486-45e5-9a5a-3c0cf3839395 default }" containerID=f80a7e687810f2bcd87797bb4449c7730e84934af738dda36ccb64de2fc433de datapathConfiguration="&{false false false false false }" interface=lxcd72b939e8d45 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f80a7e6878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f80a7e6878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcff16e87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=63760 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=bcff16e87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=235 identity=63760 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f80a7e6878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=3258 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f80a7e6878 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=3258 ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 130d3fe9-aa75-48fa-af1a-788b35da3468 default }" containerID=9c275ac8dfd7214fb74d9e9cd9c185173b6e65fcaec40d4c2f6b69d30143597a datapathConfiguration="&{false false false false false }" interface=lxc3c305a0ce829 k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c275ac8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c275ac8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c275ac8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=20382 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c275ac8df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=20382 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcff16e87e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=235 identity=63760 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcff16e87e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=235 identity=63760 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zr4lb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f80a7e6878 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1148 identity=3258 ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f80a7e6878 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1148 identity=3258 ipv4=10.0.0.137 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-hkzcq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 e3accac1-b624-4955-a739-4d69fef811a5 default }" containerID=aa256a37f7d357f0ef71d97bdfc1e4d163de483d3ae3c971bb5c9fa867385b94 datapathConfiguration="&{false false false false false }" interface=lxc361e9caf1e68 k8sPodName=kube-system/coredns-67659f764b-sg9hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa256a37f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa256a37f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 4412f100-4598-4f7f-8302-f3241b9c65c5 default }" containerID=574aa34b9a21657fe008397824b8849e70434a3f03a7862ab127b9c9edf2fdfe datapathConfiguration="&{false false false false false }" interface=lxca9b289156545 k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr labels="[]" subsys=daemon sync-build=true level=info msg="Identity of endpoint changed" containerID=aa256a37f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=14594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa256a37f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=14594 ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn subsys=endpoint level=info msg="New endpoint" containerID=574aa34b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=574aa34b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.9 3e027619-2425-477e-a6e7-0e3e9d2b9178 default }" containerID=0586755fa29467f122662c1e16bf259414ace52accfddd8e47159a228f549d9e datapathConfiguration="&{false false false false false }" interface=lxc0f81280abe3a k8sPodName=kube-system/coredns-67659f764b-ctjgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0586755fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0586755fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0586755fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=14594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0586755fa2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2899 identity=14594 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c275ac8df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1428 identity=20382 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 24b2bfbe-53ce-4c4c-bae2-dc2bf9a4d67a default }" containerID=eb06f7047512879ad372c5cef0afa5c39f9e30707fada6d202abfdb6d9249d55 datapathConfiguration="&{false false false false false }" interface=lxca709a1dd5d62 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c275ac8df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1428 identity=20382 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0586755fa2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2899 identity=14594 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0586755fa2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2899 identity=14594 ipv4=10.0.0.9 ipv6= k8sPodName=kube-system/coredns-67659f764b-ctjgw subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=574aa34b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=15516 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=574aa34b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=970 identity=15516 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=aa256a37f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=27 identity=14594 ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa256a37f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=27 identity=14594 ipv4=10.0.0.235 ipv6= k8sPodName=kube-system/coredns-67659f764b-sg9hn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=574aa34b9a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=970 identity=15516 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr subsys=endpoint level=info msg="Successful endpoint creation" containerID=574aa34b9a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=970 identity=15516 ipv4=10.0.0.81 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r7gvr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=18736 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=18736 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb06f70475 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2799 identity=18736 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb06f70475 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2799 identity=18736 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-999p8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e23886017 endpointID=1034 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-chmb4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=0e23886017 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1034 identity=14594 ipv4=10.0.0.26 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-chmb4 subsys=endpoint level=info msg="Delete endpoint request" containerID=9c275ac8df endpointID=1428 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-wb95f subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=156d87da-ef14-4ee2-ab9e-1e4c676e16d6 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9c275ac8df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1428 identity=20382 ipv4=10.0.0.210 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-wb95f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 319caf0e-ea9d-4309-9fa1-19760b6c5bf8 default }" containerID=18520c9adaa8b02e826f32bcaa73d7a08bcf54e8e209c64c5e7c87136564cbab datapathConfiguration="&{false false false false false }" interface=lxcee6725b0ca00 k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18520c9ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18520c9ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18520c9ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identity=27035 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18520c9ada datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2848 identity=27035 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18520c9ada datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2848 identity=27035 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=endpoint level=info msg="Successful endpoint creation" containerID=18520c9ada datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2848 identity=27035 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18520c9ada endpointID=2848 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-frpsk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=33bb596f-1bef-41f6-9e1b-01d5a42c5713 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=18520c9ada datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2848 identity=27035 ipv4=10.0.0.219 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-frpsk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 fc7c1d90-60bb-4eb7-bc38-3920332af026 default }" containerID=89fccc37a3dc7840920b05c620bc72153a70627f41f91bac7c1b79c397686421 datapathConfiguration="&{false false false false false }" interface=lxcdc903b3274f7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89fccc37a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89fccc37a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89fccc37a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=47363 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89fccc37a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1920 identity=47363 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89fccc37a3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1920 identity=47363 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89fccc37a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1920 identity=47363 ipv4=10.0.0.18 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-hfg55 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 0a541fd2-06e8-40a2-9a17-2d503d15b119 default }" containerID=2495c98d51c847520d393227f706a082ceb827df63a959322a1bd8711e786c6e datapathConfiguration="&{false false false false false }" interface=lxcfa228c5b8847 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2495c98d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2495c98d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2495c98d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=50261 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2495c98d51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=50261 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2495c98d51 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=26 identity=50261 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2495c98d51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=50261 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2495c98d51 endpointID=26 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-rvkfh subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=8122ad40-3ad3-42c9-a903-f860547843ab k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2495c98d51 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=50261 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rvkfh subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=22ff653b-91c2-4350-bb1a-9ed2e66f8ff3] Description:}]" policyAddRequest=1c8e0940-5e08-4adf-8911-2ce7fba193bc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1c8e0940-5e08-4adf-8911-2ce7fba193bc policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ea7dc6e3-6b82-48e2-b238-6a97a6be97c4] Description:}]" policyAddRequest=473e48d7-2e08-4601-a232-058db99347e5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=473e48d7-2e08-4601-a232-058db99347e5 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.221 a20c039f-a3c8-45f7-9e00-e69c4086b273 default }" containerID=a27759419d9ac80920df942a427d7215625d04e4e1a00ef52773959477d36a6f datapathConfiguration="&{false false false false false }" interface=lxcede6f3965939 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a27759419d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a27759419d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a27759419d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=4857 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a27759419d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=569 identity=4857 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a27759419d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=569 identity=4857 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=a27759419d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=569 identity=4857 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w5g9s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.158 e15b9e50-fb9c-4a63-be53-f59e05a6407b default }" containerID=8aae391a8df0628b6c012f032a4c88c571fb0e6dfe976b23fc4b541f14786b5a datapathConfiguration="&{false false false false false }" interface=lxc9198025b95bc k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8aae391a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8aae391a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8aae391a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identity=22853 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8aae391a8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2129 identity=22853 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8aae391a8d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2129 identity=22853 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8aae391a8d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2129 identity=22853 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-s2df4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.160 18bfa12d-dc5d-45dc-b2ad-57b6efc1d86d default }" containerID=f024a7bb7a4be61f114a4323821877f771243ee9ad82f55be852c401f91555a1 datapathConfiguration="&{false false false false false }" interface=lxc507e2a038ef4 k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f024a7bb7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f024a7bb7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f024a7bb7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=55179 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f024a7bb7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=359 identity=55179 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f024a7bb7a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=359 identity=55179 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f024a7bb7a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=359 identity=55179 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-mvzc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 2c3e8a7e-7ad3-4681-b20b-cb1fdecc2082 default }" containerID=b1a726b37e9416b95eae0b1135dfa22c11e147f4bfd4da619df9fa8567dbf7d9 datapathConfiguration="&{false false false false false }" interface=lxc791faa210577 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=6275 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=417 identity=6275 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1a726b37e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=417 identity=6275 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1a726b37e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=417 identity=6275 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 68e16bd8-3737-46f5-8c88-318e3aa5371e default }" containerID=2a88e50f820bb1bfd4c9f82a0140a6a7b25519bea911b14ff602c077ddeae08f datapathConfiguration="&{false false false false false }" interface=lxc0c201ce82706 k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a88e50f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1294 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a88e50f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a88e50f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1294 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a88e50f82 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1294 identity=13141 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a88e50f82 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1294 identity=13141 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a88e50f82 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1294 identity=13141 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a88e50f82 endpointID=1294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2a88e50f82 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1294 identity=13141 ipv4=10.0.0.188 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93eeee71-3029-41b3-8c08-6130b4e9fd49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 28cefe69-671a-4350-88a4-15fca9494541 default }" containerID=db5cf8b92f6d977fa3e11e03e586da57586e1202a77aa5291825437a470534ae datapathConfiguration="&{false false false false false }" interface=lxcf6b08147a69f k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=12215 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=12215 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db5cf8b92f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=217 identity=12215 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db5cf8b92f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=217 identity=12215 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=32042ee5-2a39-474d-84f9-fff9070c999b] Description:}]" policyAddRequest=f41bd1ef-fecf-4a7d-9ec4-f2313ce71435 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=f41bd1ef-fecf-4a7d-9ec4-f2313ce71435 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 ab672a14-f4bd-40ad-8130-d991793d8eb6 default }" containerID=3d63675eda957ecf85031ab1abd1e4771d77d850f3528f6cc573731acf861b12 datapathConfiguration="&{false false false false false }" interface=lxc530060321f58 k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d63675eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d63675eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d63675eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d63675eda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2968 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d63675eda datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2968 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d63675eda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2968 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=daemon level=info msg="Delete endpoint request" containerID=3d63675eda endpointID=2968 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3d63675eda datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2968 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299a93b2-7d42-4c1d-bf63-a463628fd90e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 94ec4bf8-1559-4645-905f-8f06f0c74efb default }" containerID=daa6afcd9747f1dec9067b8865e7aa76a87b69784485ad5d7a96c9dee561fa00 datapathConfiguration="&{false false false false false }" interface=lxc1324771e34fa k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daa6afcd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daa6afcd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=daa6afcd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=503 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daa6afcd97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=989 identity=503 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daa6afcd97 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=989 identity=503 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=daa6afcd97 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=989 identity=503 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=31979aab-79be-4413-a26f-b93bb0b72edf] Description:}]" policyAddRequest=f3acf5b3-ab76-4782-84eb-309f3cc11703 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f3acf5b3-ab76-4782-84eb-309f3cc11703 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.143 79089291-0d66-4aae-b4f6-268395205136 default }" containerID=a1758769cda3ae5188b0d082dc7c18bc4768de1079a72c9451a252710c9d37dd datapathConfiguration="&{false false false false false }" interface=lxcecc2575e41fb k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1758769cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1758769cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1758769cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=32035 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1758769cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=32035 ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1758769cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=863 identity=32035 ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1758769cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=863 identity=32035 ipv4=10.0.0.143 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010638873483301094 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.152 46f7a079-d533-4e91-9142-e1c446bf845d default }" containerID=aa29fdfbda0b80a4a8d16b1ba25bdb7a005dd79fdbd0521408f584c86a69ec52 datapathConfiguration="&{false false false false false }" interface=lxc8c60b8387e1c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa29fdfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa29fdfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 079361e1-3ffe-44d9-a24e-c2d99c9ba628 default }" containerID=e5c58fe996ee7f239bfe010a5fabbbb0c16a65f6c5d68a3e7f064fe679ce06c5 datapathConfiguration="&{false false false false false }" interface=lxc8c6d9ce069a2 k8sPodName=monitoring/node-feature-discovery-worker-nhglz labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa29fdfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=6243 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=aa29fdfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1999 identity=6243 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=3198 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3361 identity=3198 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 0672f563-c80c-49bc-9698-af029524e934 default }" containerID=0a1d33f078de87b3693172e64272f5a68a1d5e9632c5f9933110d72775a68e6a datapathConfiguration="&{false false false false false }" interface=lxc289b497af50f k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a1d33f078 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3053 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a1d33f078 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3053 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a1d33f078 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3053 identity=6874 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a1d33f078 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3053 identity=6874 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa29fdfbda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1999 identity=6243 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa29fdfbda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1999 identity=6243 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-xbdmk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e5c58fe996 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3361 identity=3198 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5c58fe996 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3361 identity=3198 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-nhglz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a1d33f078 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3053 identity=6874 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a1d33f078 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3053 identity=6874 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-gzs9r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 16a28416-717b-473c-b07d-e616bd38f452 default }" containerID=4e7da2023580aa40a4710463440b6428a66d28073abb88b10ac20099ad4263eb datapathConfiguration="&{false false false false false }" interface=lxcd572a9abccab k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e7da20235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e7da20235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e7da20235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=18614 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e7da20235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1859 identity=18614 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e7da20235 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1859 identity=18614 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e7da20235 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1859 identity=18614 ipv4=10.0.0.8 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-sgtxw subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1538 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01538 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01538 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01538 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01538:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1538 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 e6d4f62b-6b3a-43f9-97bf-6fdef9b2843c default }" containerID=0e86591db1cb50cb16a5de62c634c98f65ab07aab389aa5670666de17719f5a8 datapathConfiguration="&{false false false false false }" interface=lxc56ca8cb8ab5b k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e86591db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e86591db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e86591db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=6953 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0e86591db1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1880 identity=6953 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e86591db1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1880 identity=6953 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e86591db1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1880 identity=6953 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e86591db1 endpointID=1880 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-t8554 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=13866621-935b-40ac-ae18-dd93f722f2bd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0e86591db1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1880 identity=6953 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-t8554 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 4cbe54d9-7718-425d-8ff5-83f290baca28 default }" containerID=a9c5b8e6f48b8a44e2bc19544f655c95376502b50e42aa9a8a29c399ffddc608 datapathConfiguration="&{false false false false false }" interface=lxc6062ff235a24 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 24c20555-ca4c-45c4-84a9-9abee0d1d539 default }" containerID=4e5e3dbaa1d346ca8c62bab08a47bd0a587845bb9bce9be38d0b99663e4f30e3 datapathConfiguration="&{false false false false false }" interface=lxc75ec056eba4b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=6915 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=403 identity=6915 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=60440 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=60440 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 6cd674b6-9240-489d-9ccf-3344797b53c4 default }" containerID=7db63c7c3f6d67bcc88bc21525321ff32dc444b3832a6f0b70cb98451f73a3b2 datapathConfiguration="&{false false false false false }" interface=lxcad1a08316c60 k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7db63c7c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7db63c7c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7db63c7c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=10048 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7db63c7c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=10048 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e5e3dbaa1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1021 identity=60440 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e5e3dbaa1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1021 identity=60440 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cj2pz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7db63c7c3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=230 identity=10048 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=7db63c7c3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=10048 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75849cccfd-2q6cb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9c5b8e6f4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=403 identity=6915 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9c5b8e6f4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=6915 ipv4=10.0.0.204 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-b8wlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 504c4264-5bce-4d3c-8f75-69ff36cf1910 default }" containerID=8c78ff6a76e7bc6bf74410d13f86db8dadf858598690479ecb2424d650343ea6 datapathConfiguration="&{false false false false false }" interface=lxc9badf265af8a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c78ff6a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c78ff6a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c78ff6a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=51892 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c78ff6a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=51892 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c78ff6a76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=51892 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c78ff6a76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=51892 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.253 cf9a21d5-a083-4a83-ac94-a01fa60a498f default }" containerID=2067b139c4ede418cc1f77a0e08e525ae2989b57b2724ec31c2c9d7cfbc5fbae datapathConfiguration="&{false false false false false }" interface=lxc253c5a7b13c9 k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2067b139c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2067b139c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2067b139c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2067b139c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1246 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2067b139c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1246 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2067b139c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 b038dde8-4ac3-42d9-b4a5-2fd7d59b992a default }" containerID=b23214e1966e0fb60795a9f60a02e4873b885ca8ba80b989181bcb4ddf954c7d datapathConfiguration="&{false false false false false }" interface=lxc45e234f41894 k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b23214e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b23214e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b23214e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b23214e196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=544 identity=13141 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b23214e196 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=544 identity=13141 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b23214e196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=13141 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c78ff6a76 endpointID=1588 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-l9m99 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=e323ab21-86f8-4408-8b53-b5e174e700d4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8c78ff6a76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=51892 ipv4=10.0.0.36 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-l9m99 subsys=endpoint level=info msg="Delete endpoint request" containerID=b23214e196 endpointID=544 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=2067b139c4 endpointID=1246 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b23214e196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=544 identity=13141 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5c5b0d93-074a-4309-98d3-9e758a68c0b7 subsys=endpoint level=info msg="Removed endpoint" containerID=2067b139c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1246 identity=13141 ipv4=10.0.0.253 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1abfffa2-795a-4d06-9201-943c89cbe039 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 b3a56593-5e4d-45fc-b191-d944e08da335 default }" containerID=e75e7a49698c1b9f219ed598b8a88c704b3523d4abf99098fb18987c69d11f79 datapathConfiguration="&{false false false false false }" interface=lxc4a0a2235cd05 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e75e7a4969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e75e7a4969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e75e7a4969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identity=28263 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e75e7a4969 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identity=28263 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e75e7a4969 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2587 identity=28263 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e75e7a4969 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2587 identity=28263 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 d5bf1fc6-8834-42e0-ba0b-a9df2975ae26 default }" containerID=f7f7b1fbf0f04c9e6d7f46a37de53efc405bf3fc7efadef5c3766e198db745e0 datapathConfiguration="&{false false false false false }" interface=lxcca453b649646 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7f7b1fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7f7b1fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7f7b1fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=21933 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7f7b1fbf0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1807 identity=21933 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7f7b1fbf0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1807 identity=21933 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7f7b1fbf0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1807 identity=21933 ipv4=10.0.0.46 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 db8bd90a-8087-443a-8dd6-8f699b3a2f2a default }" containerID=efd41a0051323086c601805cee120cbcd43a2646e2b81f73fc822dea981a2077 datapathConfiguration="&{false false false false false }" interface=lxc5486aac64ec0 k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efd41a0051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efd41a0051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efd41a0051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=4665 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efd41a0051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2554 identity=4665 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 540fedd8-27d7-49fd-8f46-4a738af9af27 default }" containerID=e6ac556c2cf7d64ed50da25e9d61ffacc8821c210661c5b9ae6f3e1e7a1444bf datapathConfiguration="&{false false false false false }" interface=lxc371900153fc8 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6ac556c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6ac556c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.17 e9198fee-7557-49a9-90d3-4e9a9c5d5e46 default }" containerID=b23090b57973f9d21206893d0c5211e6b9f7bb409afdbd433c7f804b177fc2ca datapathConfiguration="&{false false false false false }" interface=lxcf6ee653c88cd k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b23090b579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b23090b579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6ac556c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=8109 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e6ac556c2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1267 identity=8109 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b23090b579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=55883 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b23090b579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=55883 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efd41a0051 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2554 identity=4665 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=efd41a0051 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2554 identity=4665 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-mz7s6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 3add87c5-dfe2-4120-96d7-a78e39191cd0 default }" containerID=dda2534fc78478ccd7f9ee558f87f45878675228170424dcc64053408e8ec448 datapathConfiguration="&{false false false false false }" interface=lxc6526e67d219d k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dda2534fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dda2534fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dda2534fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dda2534fc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1082 identity=13141 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b23090b579 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=55883 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b23090b579 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=55883 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e6ac556c2c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1267 identity=8109 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6ac556c2c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1267 identity=8109 ipv4=10.0.0.245 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dda2534fc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1082 identity=13141 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dda2534fc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=13141 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 275d2578-9fdb-4dd4-81ee-5695b22622f5 default }" containerID=6dbc1b166d9b57483d597b6949266e2ef9c185f0a0111139a11cb1fb055dfb8d datapathConfiguration="&{false false false false false }" interface=lxc3517661124ea k8sPodName=monitoring/vector-xnmdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dbc1b166d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dbc1b166d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dbc1b166d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=4110 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dbc1b166d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=901 identity=4110 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6dbc1b166d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=901 identity=4110 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dbc1b166d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=901 identity=4110 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-xnmdm subsys=daemon level=info msg="Delete endpoint request" containerID=dda2534fc7 endpointID=1082 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dda2534fc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1082 identity=13141 ipv4=10.0.0.47 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0368a641-918b-4730-ac80-25800907a5e0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 406a17c2-bb7f-42d9-9105-1861f05d9a4a default }" containerID=04fc0e0db0d0a25fdff8d2a648c1f12c5ade7a79e704741340a0625c51d7aa3f datapathConfiguration="&{false false false false false }" interface=lxc93fa82367b5a k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04fc0e0db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04fc0e0db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04fc0e0db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=15711 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04fc0e0db0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2015 identity=15711 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04fc0e0db0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2015 identity=15711 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04fc0e0db0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2015 identity=15711 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 ffbef2b9-2199-4821-9ce5-f020c4c0afcd default }" containerID=ce25a3d6f02d119c9f1a97fda4fcc5e6bc9b9d966db968f10f1e99446650c29e datapathConfiguration="&{false false false false false }" interface=lxc080c71364c25 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce25a3d6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce25a3d6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce25a3d6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=8834 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce25a3d6f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3609 identity=8834 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce25a3d6f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3609 identity=8834 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce25a3d6f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3609 identity=8834 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-wcs2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 328c68af-8122-4e31-a0e1-ce2f9c5b3066 default }" containerID=92296d17eebd0f6789448b5f57e43b3765c136e0ebceaab98cab429776aae009 datapathConfiguration="&{false false false false false }" interface=lxc642d5442e647 k8sPodName=openstack/memcached-memcached-6479589586-9clh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92296d17ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92296d17ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92296d17ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=20636 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92296d17ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2196 identity=20636 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=92296d17ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2196 identity=20636 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=92296d17ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2196 identity=20636 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-9clh6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 64db96ff-22e2-4118-b696-3b00422556a4 default }" containerID=07f5028e25a47a56d43c17d4d05e66d8afe74faa2da1f51feb8d3d4b9ab4c898 datapathConfiguration="&{false false false false false }" interface=lxcffb9d412b601 k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07f5028e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07f5028e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07f5028e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07f5028e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2894 identity=13141 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07f5028e25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2894 identity=13141 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07f5028e25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2894 identity=13141 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=daemon level=info msg="Delete endpoint request" containerID=07f5028e25 endpointID=2894 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=07f5028e25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2894 identity=13141 ipv4=10.0.0.53 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e57f0005-3990-4af9-9bd5-964198167df9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 57dfc9eb-5068-49d3-9a88-80d60e0abe39 default }" containerID=f9e6a6de03853af8e971012d7406d08dbd5aaeb8ac6e2a7d44d11bb1d246ec85 datapathConfiguration="&{false false false false false }" interface=lxc1437cb5ea405 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=3226 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2159 identity=3226 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9e6a6de03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2159 identity=3226 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9e6a6de03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2159 identity=3226 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.167 dbc2b552-a845-4972-99ad-76113333f838 default }" containerID=5d0a24986ab69cda40a40243a9c398da69644bd94e1ca31410dc70ed3da9d94d datapathConfiguration="&{false false false false false }" interface=lxcc4b40a782383 k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d0a24986a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d0a24986a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d0a24986a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=1417 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d0a24986a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=621 identity=1417 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d0a24986a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=621 identity=1417 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d0a24986a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=621 identity=1417 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-api-77bf7cd645-d2ghg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.51 a0e4c5b0-fc1b-487f-b444-555e51e82cb6 default }" containerID=4c2b793975c1830982b0064771ddd83be6a59ecc955dbb21ff4c6f40179cf39a datapathConfiguration="&{false false false false false }" interface=lxcc30f7b1b67ea k8sPodName=openstack/keystone-credential-setup-brskk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c2b793975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c2b793975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c2b793975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identity=38089 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c2b793975 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1100 identity=38089 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c2b793975 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1100 identity=38089 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c2b793975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1100 identity=38089 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4c2b793975 endpointID=1100 k8sNamespace=openstack k8sPodName=keystone-credential-setup-brskk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=5d4d6178-f6ae-41ed-89df-30e3f6b0bd60 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4c2b793975 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1100 identity=38089 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-credential-setup-brskk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 3b60760a-1daa-4d96-be19-83ceb47226c9 default }" containerID=22c00226f07f2883b8eb31b0db8b6e713a4dedad2971a0861faf7dec82b38f3c datapathConfiguration="&{false false false false false }" interface=lxc698f624e5ce6 k8sPodName=openstack/keystone-db-init-mwsmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22c00226f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22c00226f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22c00226f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=20042 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22c00226f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=995 identity=20042 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22c00226f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=995 identity=20042 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=22c00226f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=995 identity=20042 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22c00226f0 endpointID=995 k8sNamespace=openstack k8sPodName=keystone-db-init-mwsmw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=16e9b323-c51d-4a28-b82e-ac9adbc121ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=22c00226f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=995 identity=20042 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-init-mwsmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 1d7bcfb2-945d-445b-a5d6-c7d3f39d7d65 default }" containerID=34993d563455c91d0efc5aee09691ac36a334a117657c1f6af60254f20a59cff datapathConfiguration="&{false false false false false }" interface=lxc7ee9ad057c05 k8sPodName=openstack/keystone-fernet-setup-dxxfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1816 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1816 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1816 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1816 identity=16535 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1816 identity=16535 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34993d5634 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1816 identity=16535 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=34993d5634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1816 identity=16535 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34993d5634 endpointID=1816 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-dxxfq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a3c20796-9438-4f04-b43b-2fec31c2208e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=34993d5634 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1816 identity=16535 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/keystone-fernet-setup-dxxfq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 fab78ef1-dc98-425f-8dea-dc5a30925550 default }" containerID=eda8c29f29637174ce6fc3bc25c1b3346087e066c74cceeee0f569374fcc0e1b datapathConfiguration="&{false false false false false }" interface=lxc5bcf94a5c1dc k8sPodName=openstack/keystone-db-sync-5fn72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5278 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1174 identity=5278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eda8c29f29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1174 identity=5278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eda8c29f29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1174 identity=5278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eda8c29f29 endpointID=1174 k8sNamespace=openstack k8sPodName=keystone-db-sync-5fn72 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=68f8462e-b473-454b-bfa5-cbbb4650b778 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eda8c29f29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1174 identity=5278 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-5fn72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c6f78d10-5f49-41fa-a4e4-65fa49a7bce1 default }" containerID=9611844f7702e95dc3f5a8075e2dfacc59a42e42fe0c2865854b3429af522f5f datapathConfiguration="&{false false false false false }" interface=lxc0f352ee07f10 k8sPodName=openstack/keystone-rabbit-init-zsbs8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9611844f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9611844f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9611844f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=45761 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9611844f77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=808 identity=45761 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9611844f77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=808 identity=45761 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9611844f77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=45761 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9611844f77 endpointID=808 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-zsbs8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f3531b69-a956-4da3-b2d4-d941058560e5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9611844f77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=808 identity=45761 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/keystone-rabbit-init-zsbs8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 730fbdba-e88d-4a5a-9ab5-734aa8847dca default }" containerID=1832d1e539a83e2098fcc8dcf4f9d7dd96cbc158af17de97be0350b2cd43c0df datapathConfiguration="&{false false false false false }" interface=lxc42836f7ef5f7 k8sPodName=openstack/keystone-domain-manage-hdrdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1832d1e539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1832d1e539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1832d1e539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identity=4611 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1832d1e539 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1787 identity=4611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1832d1e539 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1787 identity=4611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=1832d1e539 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1787 identity=4611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1832d1e539 endpointID=1787 k8sNamespace=openstack k8sPodName=keystone-domain-manage-hdrdz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3c75cd84-86fe-4aa7-9857-784f1aae756f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1832d1e539 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1787 identity=4611 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/keystone-domain-manage-hdrdz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 7341c8e6-fda2-4256-af5a-5b093ea39b55 default }" containerID=24d437df760c65494c4ada5dd9f0a8c73ae30cf4a95bd580ceff885c620518b2 datapathConfiguration="&{false false false false false }" interface=lxcbc6b19738ca6 k8sPodName=openstack/keystone-bootstrap-8d77j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24d437df76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24d437df76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24d437df76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identity=13303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24d437df76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3313 identity=13303 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=24d437df76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3313 identity=13303 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=endpoint level=info msg="Successful endpoint creation" containerID=24d437df76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3313 identity=13303 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24d437df76 endpointID=3313 k8sNamespace=openstack k8sPodName=keystone-bootstrap-8d77j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=1320294d-85f4-4c83-b7cb-f12dcddedf7d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=24d437df76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3313 identity=13303 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/keystone-bootstrap-8d77j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 e280a7ec-3551-4e3f-9a4c-12975be6b2b8 default }" containerID=43c983618406f8208b71d4f1fb937eb83161d9e08560ce95141e349f21d2e21a datapathConfiguration="&{false false false false false }" interface=lxc2e3e914fc5ee k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43c9836184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43c9836184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43c9836184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43c9836184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1491 identity=13141 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=43c9836184 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1491 identity=13141 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=endpoint level=info msg="Successful endpoint creation" containerID=43c9836184 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1491 identity=13141 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=daemon level=info msg="Delete endpoint request" containerID=43c9836184 endpointID=1491 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=43c9836184 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1491 identity=13141 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-51c25e1a-5aac-4f02-928b-e9c681b7d2de subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 9944915d-1e7d-40bc-b738-dde9ba7410e2 default }" containerID=0c8d6fc8bd9a87409c329f0cdd84f022acc2d6234c860edada02933a84293c8b datapathConfiguration="&{false false false false false }" interface=lxcf9a08c44dbdd k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c8d6fc8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c8d6fc8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c8d6fc8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=45921 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0c8d6fc8bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=45921 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c8d6fc8bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=20 identity=45921 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c8d6fc8bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=45921 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034801222827924846 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.11 1c70d55d-b3eb-4521-868a-0319afd3a636 default }" containerID=27bca6a14ad2d7786ea890dd912a55abb0959e839d3ff1960d003a226e13952f datapathConfiguration="&{false false false false false }" interface=lxcda643455a5e9 k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27bca6a14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27bca6a14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27bca6a14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=52076 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27bca6a14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3247 identity=52076 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 096988b8-3b45-406d-8627-be5edc9ad6e2 default }" containerID=60e956626cad6c1df25e74fca74f30f8cc20f5ebc9617ead752535f5c7377eac datapathConfiguration="&{false false false false false }" interface=lxc275e580a065e k8sPodName=openstack/barbican-db-init-f8q24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60e956626c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60e956626c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60e956626c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=64648 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60e956626c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=64648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27bca6a14a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3247 identity=52076 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27bca6a14a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3247 identity=52076 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-api-77fbd5b65d-gjqg8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60e956626c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=639 identity=64648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=60e956626c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=64648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60e956626c endpointID=639 k8sNamespace=openstack k8sPodName=barbican-db-init-f8q24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f072a7a7-f16d-455c-b63b-614260ee9d0d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=60e956626c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=639 identity=64648 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-init-f8q24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 7fdc854f-79b7-4bf5-97b4-ee64f81cec0d default }" containerID=f35408d2631a97015bcb26a65ac467c667a571bb4ac014ca253bee9eb1eb9651 datapathConfiguration="&{false false false false false }" interface=lxc13d3b9436ffd k8sPodName=openstack/barbican-db-sync-65wl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=20615 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1334 identity=20615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f35408d263 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1334 identity=20615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f35408d263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1334 identity=20615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f35408d263 endpointID=1334 k8sNamespace=openstack k8sPodName=barbican-db-sync-65wl8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=195ec4a4-64e7-4d7d-9f73-1056b9678468 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f35408d263 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1334 identity=20615 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-db-sync-65wl8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 e2778fcc-3c43-409c-8ca4-0c85fcfc0826 default }" containerID=6f7b9784968071422915022fd5cb37568d8e799ae7f770a9ca2f8f5ced2367e2 datapathConfiguration="&{false false false false false }" interface=lxc3427783caf66 k8sPodName=openstack/barbican-rabbit-init-6fhsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f7b978496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f7b978496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f7b978496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=861 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f7b978496 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3752 identity=861 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6f7b978496 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3752 identity=861 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f7b978496 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=861 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=daemon level=info msg="Delete endpoint request" containerID=6f7b978496 endpointID=3752 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-6fhsj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5454068e-6a07-4fd5-bada-33044b3f154c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6f7b978496 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3752 identity=861 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-rabbit-init-6fhsj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 ab9d3e6f-039e-471a-bd03-942b99346473 default }" containerID=2010c824a43e67ebe4cfa5a83e53042257581bdbed8b425f7440a4353619dcae datapathConfiguration="&{false false false false false }" interface=lxc1d3a360e9227 k8sPodName=openstack/barbican-ks-service-2bqwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identity=11309 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3182 identity=11309 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2010c824a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3182 identity=11309 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2010c824a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3182 identity=11309 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2010c824a4 endpointID=3182 k8sNamespace=openstack k8sPodName=barbican-ks-service-2bqwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e3281e17-ce45-4a91-8754-5ecb77d3fe58 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2010c824a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3182 identity=11309 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/barbican-ks-service-2bqwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 16e368b3-0d44-4d8c-b4f1-d3b867f8d6fb default }" containerID=7e0377b351b6690b6fd7d2ba3093fab77ec6b3669cfe4dffe5f4cfe10dcfa353 datapathConfiguration="&{false false false false false }" interface=lxca5669b10fe9e k8sPodName=openstack/barbican-ks-endpoints-2w228 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e0377b351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e0377b351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7e0377b351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=14572 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e0377b351 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=467 identity=14572 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7e0377b351 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=467 identity=14572 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e0377b351 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=14572 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7e0377b351 endpointID=467 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-2w228 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a95b8df1-f2d6-47b5-900e-5fc3801ee28f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7e0377b351 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=467 identity=14572 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-endpoints-2w228 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 5107cf2c-94a7-4283-8e3e-49c4fe8ce403 default }" containerID=62aeda07610d97d0f361c33287c5ee3518a45a4d4d15b320859d4f92c387ef5d datapathConfiguration="&{false false false false false }" interface=lxccee10258fb62 k8sPodName=openstack/barbican-ks-user-9754z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62aeda0761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62aeda0761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6a829c50-c903-410f-b435-d6c600a447f1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6a829c50-c903-410f-b435-d6c600a447f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6a829c50-c903-410f-b435-d6c600a447f1;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=6a829c50-c903-410f-b435-d6c600a447f1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62aeda0761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=22539 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6a829c50-c903-410f-b435-d6c600a447f1,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6a829c50-c903-410f-b435-d6c600a447f1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=62aeda0761 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=22539 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62aeda0761 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=131 identity=22539 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=endpoint level=info msg="Successful endpoint creation" containerID=62aeda0761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=22539 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62aeda0761 endpointID=131 k8sNamespace=openstack k8sPodName=barbican-ks-user-9754z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6a829c50-c903-410f-b435-d6c600a447f1 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=6a829c50-c903-410f-b435-d6c600a447f1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62aeda0761 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=131 identity=22539 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-user-9754z subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.2 4172ecfd-6c3b-4e78-8265-445f8b4ce7db default }" containerID=c076145e46697bfc0283c7cbe5a43160614531c605814356f063a33d3cb44360 datapathConfiguration="&{false false false false false }" interface=lxc7081308698ad k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1998 ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1998 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1998 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1998 identity=25838 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1998 identity=25838 ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c076145e46 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1998 identity=25838 ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c076145e46 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1998 identity=25838 ipv4=10.0.0.2 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-fxnx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 a4f8dfb4-8937-4baf-8310-0f8ac207173a default }" containerID=07e77abb4ea3ccfaafa33d06c77de6b37befdc27733fc580b39a3aee1025b41f datapathConfiguration="&{false false false false false }" interface=lxc17960970aabb k8sPodName=openstack/rook-ceph-detect-version-xp6cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07e77abb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07e77abb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07e77abb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=35393 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07e77abb4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1611 identity=35393 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07e77abb4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1611 identity=35393 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=07e77abb4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1611 identity=35393 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=07e77abb4e endpointID=1611 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-xp6cc subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=3accfb4a-f34d-40da-9ca7-ae03b3322081 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=07e77abb4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1611 identity=35393 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xp6cc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 1b0aa2de-7e3a-4622-86bb-220d4f9c0bf9 default }" containerID=8bd26b3e7998237f3911b732658149009eb6df722f27005901ed5e54f082927f datapathConfiguration="&{false false false false false }" interface=lxcd333de729031 k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=14357 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=14357 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bd26b3e79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3117 identity=14357 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bd26b3e79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=14357 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bd26b3e79 endpointID=3117 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-n9xdq subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0b2b2591-2caf-4fee-94d5-84c9daa89456 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8bd26b3e79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=14357 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-n9xdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 5c271a7c-c0c2-42da-8d95-78fbfcacf857 default }" containerID=622a7e1003ae02c0cfa00fba3942a395bee1639c6f4e550b64cf238ddc26f224 datapathConfiguration="&{false false false false false }" interface=lxc23058a5577ce k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=622a7e1003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=622a7e1003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=622a7e1003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=13141 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=622a7e1003 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3997 identity=13141 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=622a7e1003 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3997 identity=13141 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=endpoint level=info msg="Successful endpoint creation" containerID=622a7e1003 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3997 identity=13141 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=daemon level=info msg="Delete endpoint request" containerID=622a7e1003 endpointID=3997 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=622a7e1003 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3997 identity=13141 ipv4=10.0.0.246 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8ffa61c6-c257-49f7-ad62-1fe566f49063 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 0e989ff0-28e4-493d-96e3-a42d2137d14d default }" containerID=4b5c70b797a9faea4479abc2fe4a618e7489b2a740007aba88f14ef843b5591c datapathConfiguration="&{false false false false false }" interface=lxc062d4e791147 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b5c70b797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b5c70b797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b5c70b797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=11738 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4b5c70b797 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=11738 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b5c70b797 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=221 identity=11738 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b5c70b797 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=221 identity=11738 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.60 9bae6b87-f59b-45dd-b3e4-caa6bf18662c default }" containerID=823e8daf54c16f75a16a9c384ca02735c6e0a537b43de0ded91b5acee3bd8238 datapathConfiguration="&{false false false false false }" interface=lxca7b5e28b0376 k8sPodName=openstack/glance-db-init-nhwwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=823e8daf54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=823e8daf54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=77dad669-0561-4663-bfaa-57b3ac979985,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=77dad669-0561-4663-bfaa-57b3ac979985,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=77dad669-0561-4663-bfaa-57b3ac979985;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=77dad669-0561-4663-bfaa-57b3ac979985;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=823e8daf54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=35455 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=77dad669-0561-4663-bfaa-57b3ac979985,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=77dad669-0561-4663-bfaa-57b3ac979985,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=823e8daf54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=35455 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=823e8daf54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2479 identity=35455 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=823e8daf54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2479 identity=35455 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 73b80938-c5bf-443b-8f70-01e290a40292 default }" containerID=a9f96729e4f5a6266da3db6283dd96195151fd30521ac621bc02bcaa76018af9 datapathConfiguration="&{false false false false false }" interface=lxc89408e25506d k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9f96729e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9f96729e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9f96729e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=25303 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a9f96729e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3750 identity=25303 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 46eb9f8f-63ab-415b-bf0e-c72cdb498bc9 default }" containerID=c09f4abe9ce7f871218eb57a373a8f8ed5ec6a39b2f3fd9da96c2b57720cc34f datapathConfiguration="&{false false false false false }" interface=lxc3a19b64c0352 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c09f4abe9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c09f4abe9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c09f4abe9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=20014 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c09f4abe9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=20014 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9f96729e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3750 identity=25303 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9f96729e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3750 identity=25303 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dzpjt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c09f4abe9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=20014 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn subsys=endpoint level=info msg="Successful endpoint creation" containerID=c09f4abe9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=20014 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nbxwn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=823e8daf54 endpointID=2479 k8sNamespace=openstack k8sPodName=glance-db-init-nhwwb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=77dad669-0561-4663-bfaa-57b3ac979985 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=77dad669-0561-4663-bfaa-57b3ac979985 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=823e8daf54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2479 identity=35455 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-db-init-nhwwb subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 86450330-f2a6-4468-b790-80fa21d1b157 default }" containerID=41c3bb66b852e971ae24f3643b95bb90648117ab038c1df57b9149732325dede datapathConfiguration="&{false false false false false }" interface=lxc4f7b4224408d k8sPodName=openstack/glance-db-sync-k8gkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf49dd55-127e-4470-8529-0767af40059c,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bf49dd55-127e-4470-8529-0767af40059c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bf49dd55-127e-4470-8529-0767af40059c;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=bf49dd55-127e-4470-8529-0767af40059c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=55274 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf49dd55-127e-4470-8529-0767af40059c,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=bf49dd55-127e-4470-8529-0767af40059c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2112 identity=55274 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41c3bb66b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2112 identity=55274 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=41c3bb66b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2112 identity=55274 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41c3bb66b8 endpointID=2112 k8sNamespace=openstack k8sPodName=glance-db-sync-k8gkc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bf49dd55-127e-4470-8529-0767af40059c k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=bf49dd55-127e-4470-8529-0767af40059c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41c3bb66b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2112 identity=55274 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/glance-db-sync-k8gkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.238 c2bbd18b-6def-428b-be59-273187c7313e default }" containerID=5d7f14af5f2293c1797f6d976a5c00ce2ecff989d1b2c12cb78c07393ea6d61f datapathConfiguration="&{false false false false false }" interface=lxcb5ce242860bc k8sPodName=openstack/glance-rabbit-init-922lh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d7f14af5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d7f14af5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d7f14af5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=26524 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5d7f14af5f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1073 identity=26524 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d7f14af5f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1073 identity=26524 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d7f14af5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1073 identity=26524 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d7f14af5f endpointID=1073 k8sNamespace=openstack k8sPodName=glance-rabbit-init-922lh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5f58d72e-5586-45b5-b0c2-fd826a3c0de8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5d7f14af5f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1073 identity=26524 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/glance-rabbit-init-922lh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 564d360e-8d05-435a-8810-6b0a7ae53b31 default }" containerID=4f3b571e791f368d341e23b228d33fef4137668c1c41f86132b9759f4283a6f8 datapathConfiguration="&{false false false false false }" interface=lxccb3d35849d9f k8sPodName=openstack/glance-ks-service-979p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f3b571e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f3b571e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f3b571e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=58681 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4f3b571e79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=244 identity=58681 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f3b571e79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=244 identity=58681 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f3b571e79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=58681 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=daemon level=info msg="Delete endpoint request" containerID=4f3b571e79 endpointID=244 k8sNamespace=openstack k8sPodName=glance-ks-service-979p8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=961f2f61-4ca0-4f0e-a136-c6775e2fe7ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4f3b571e79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=244 identity=58681 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-ks-service-979p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 78aad628-86da-4b2c-b224-9baf8e6f3860 default }" containerID=5bd4bc8bc71d9c8efb867fdfe08b8ba258e0b862bda31ffe2d8b42f1ec5ac5a6 datapathConfiguration="&{false false false false false }" interface=lxc718515b08568 k8sPodName=openstack/glance-ks-endpoints-ql6cn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5bd4bc8bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5bd4bc8bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5bd4bc8bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=29255 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bd4bc8bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1201 identity=29255 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5bd4bc8bc7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1201 identity=29255 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bd4bc8bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=29255 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5bd4bc8bc7 endpointID=1201 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-ql6cn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c495e26a-cc3f-4f27-811e-ca7bce482422 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5bd4bc8bc7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1201 identity=29255 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-ks-endpoints-ql6cn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 9a4dc1b6-a87b-4b58-9386-f0281cc8c173 default }" containerID=fc2e1ad1ba5276cc620c3bbea209eb0c8c1aac6e52e636644ac6bc6a23bab3d8 datapathConfiguration="&{false false false false false }" interface=lxcacb19e633273 k8sPodName=openstack/glance-ks-user-b7h65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc2e1ad1ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc2e1ad1ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc2e1ad1ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=1717 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc2e1ad1ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=1717 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fc2e1ad1ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=1717 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc2e1ad1ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=1717 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc2e1ad1ba endpointID=848 k8sNamespace=openstack k8sPodName=glance-ks-user-b7h65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e75c8d9e-c144-4b3c-a667-a644f5cb6dbd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fc2e1ad1ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=1717 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-ks-user-b7h65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 ed4a8bc6-abea-4bbc-bd08-cfc12bf68849 default }" containerID=ee34703e7e96262b9ce095a3bb1bb0d07bc63ec00fc0ccd87f7cc7bb2402181b datapathConfiguration="&{false false false false false }" interface=lxc8b3104aba108 k8sPodName=openstack/glance-metadefs-load-4npgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=45229 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=45229 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee34703e7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3773 identity=45229 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee34703e7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3773 identity=45229 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee34703e7e endpointID=3773 k8sNamespace=openstack k8sPodName=glance-metadefs-load-4npgh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=d1c129e9-4df6-44cd-b2c4-85d893dcb0bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ee34703e7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3773 identity=45229 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/glance-metadefs-load-4npgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 0dce72b1-acc5-40e8-94c5-973ee9e8b496 default }" containerID=18ab8348d91bcedf4c17f677c58628cd081cd2ffa3cd74c0893f05f34d427183 datapathConfiguration="&{false false false false false }" interface=lxca559a45def90 k8sPodName=openstack/glance-storage-init-588fw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18ab8348d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18ab8348d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18ab8348d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=1179 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18ab8348d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=1179 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18ab8348d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=228 identity=1179 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=endpoint level=info msg="Successful endpoint creation" containerID=18ab8348d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=1179 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18ab8348d9 endpointID=228 k8sNamespace=openstack k8sPodName=glance-storage-init-588fw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=72bafa66-f2b5-4ee6-93ca-f03d6d8c7e56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=18ab8348d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=228 identity=1179 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/glance-storage-init-588fw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 9338be3b-f194-4813-b60c-f6b6677e0626 default }" containerID=3ccca630e0a07512dc57d6cb8413fd1a94e93a6493b1c4c35da36a5f3ca18697 datapathConfiguration="&{false false false false false }" interface=lxc424c90821d71 k8sPodName=openstack/glance-api-86985b5d6-ckz5p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ccca630e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ccca630e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3ccca630e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=3658 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ccca630e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1069 identity=3658 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ccca630e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1069 identity=3658 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ccca630e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1069 identity=3658 ipv4=10.0.0.219 ipv6= k8sPodName=openstack/glance-api-86985b5d6-ckz5p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 c809fabd-dae0-4a81-af9c-959c11f5f369 default }" containerID=a372840bba7f0ef740ce964cf83c738f98600814f60810a7b6b5359da65562cc datapathConfiguration="&{false false false false false }" interface=lxc1d51ad7a7f7f k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a372840bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a372840bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a372840bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=29281 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a372840bba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1840 identity=29281 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 a732c0ef-d36a-4b11-9ef2-a7b1a616ee07 default }" containerID=46309fb03d8e43719b3e0178e0aae9844aa89726631b9e95ba1521f3ae2645d0 datapathConfiguration="&{false false false false false }" interface=lxcf0957e5748f5 k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46309fb03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46309fb03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46309fb03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=49264 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46309fb03d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=49264 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.182 db41102c-1233-4829-adfa-616c9741103e default }" containerID=437415f506cd60128caaf2e2dabb5702a85b93748850f2cea3d066db8f8238e9 datapathConfiguration="&{false false false false false }" interface=lxc6d1d151aa53e k8sPodName=openstack/staffeln-db-init-btvdf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=437415f506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=437415f506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=437415f506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=64601 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=437415f506 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=64601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a372840bba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1840 identity=29281 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a372840bba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1840 identity=29281 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/staffeln-api-7755c54cb4-pcvcs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=46309fb03d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2461 identity=49264 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl subsys=endpoint level=info msg="Successful endpoint creation" containerID=46309fb03d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=49264 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/staffeln-conductor-9cd5787ff-q8ptl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=437415f506 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1117 identity=64601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=endpoint level=info msg="Successful endpoint creation" containerID=437415f506 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=64601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=437415f506 endpointID=1117 k8sNamespace=openstack k8sPodName=staffeln-db-init-btvdf subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=45716480-b566-46d6-a4e3-cf2428ab5914 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=437415f506 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=64601 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/staffeln-db-init-btvdf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 78f4ab56-ac4a-4709-882a-316eba51bf9b default }" containerID=9697d05115f010897f546e6806d8893193e7d687d4def9ea5504c3f8cda418fb datapathConfiguration="&{false false false false false }" interface=lxc9d50cab9522b k8sPodName=openstack/staffeln-db-sync-wsfz6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9697d05115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9697d05115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9697d05115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=53514 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=96380c0f-2c6a-43c4-bd40-db29c5c5aae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9697d05115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=53514 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9697d05115 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1205 identity=53514 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9697d05115 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1205 identity=53514 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/staffeln-db-sync-wsfz6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager