level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="942.242µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="53.011µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="968.901µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.5µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.744525ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="21.33µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="24.501µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="82.342µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="89.072µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="106.152µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="489.081µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.62µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.341232ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.714425ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="30.911µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="44.501µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="236.095µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="106.743µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="91.192µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.553021ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="152.383µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.250.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.830801ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.648864ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.971426ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.701µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="61.831µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.931µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="315.997µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.05µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="213.445µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="808.999µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="870.51µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="15.79µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.250 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.250 ipAddr.ipv6="" k8sNodeIP=199.204.45.250 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.250" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.5" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.250" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.250} {CiliumInternalIP 10.0.0.5}] 10.0.0.0/24 [] [] 10.0.0.221 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43677" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.632727038s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.911µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="31.651µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="45.321µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="26.561µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.686458436s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=293.858413ms file-path=/var/run/cilium/state/templates/9ed0162415d94b0efaa9182aa5d7beefed5af9fb6c9ef217664f8d8b74659cfc/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=897 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 ipv4=10.0.0.221 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identityLabels="reserved:health" ipv4=10.0.0.221 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=255 identity=4 identityLabels="reserved:health" ipv4=10.0.0.221 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.075424729s file-path=/var/run/cilium/state/templates/9b36ceb08f42d6c8a5c30d099cdee95981241b4584bec15d08754be2b95c4aca/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=255 identity=4 ipv4=10.0.0.221 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 22d2b1d8-1b60-4042-b09c-2760aad6d867 default }" containerID=2fd85aaf56001a1b3b8d8b0945a12d4291169a78f5839b4bc53c82512970a3a6 datapathConfiguration="&{false false false false false }" interface=lxcb6b4079fc51c k8sPodName=kube-system/coredns-67659f764b-bfv5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=63933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=63933 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 0c99b9e5-fb7d-47da-84d8-a547b9952827 default }" containerID=11c67786e3828845fb10b2b92e6438e39deac91c09ddd4140353fecce05d21cb datapathConfiguration="&{false false false false false }" interface=lxc207371b37c6a k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11c67786e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11c67786e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11c67786e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=5741 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11c67786e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2692 identity=5741 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 8cbbd701-a57c-4692-924f-87592c6c24fa default }" containerID=fdf090ff9ec28a0f0267cb3d2d306c73085350ad75d99e382c402d551f0c7afc datapathConfiguration="&{false false false false false }" interface=lxc099ad35e444f k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.206 83f5523d-44ad-44ff-818c-5f2192cd27b3 default }" containerID=45fb2c91a0321f7196b365c4f50cec32fd822a227d848e1e25f18d58d99941f2 datapathConfiguration="&{false false false false false }" interface=lxc12ab4cf5c859 k8sPodName=kube-system/coredns-7c96b6546b-xbxgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdf090ff9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=endpoint level=info msg="New endpoint" containerID=45fb2c91a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 3ac5873c-9ac3-41bd-b8df-50b6376c2a49 default }" containerID=6a0ed928a3e709bc9e60022d65f75f437ddc585858b7016747cd3b395c751e1a datapathConfiguration="&{false false false false false }" interface=lxc63c05ae057d9 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.61 be8a8a5b-8599-4d18-941f-22cef04f5d5b default }" containerID=b599de2ead210835be68c386081b82a1cd5d5c970c1925ea1d12e64552ffff30 datapathConfiguration="&{false false false false false }" interface=lxc8c4f7f739452 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.56 5af0ecb1-1bb5-4844-8717-5f507b44ae40 default }" containerID=f5cc6952de66f694c6b97d2cd204d0355d27d883a3b56818be2686bac55ab0e6 datapathConfiguration="&{false false false false false }" interface=lxcd081badd9c4e k8sPodName=kube-system/coredns-67659f764b-4wrpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a0ed928a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45fb2c91a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=endpoint level=info msg="New endpoint" containerID=f5cc6952de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdf090ff9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=endpoint level=info msg="New endpoint" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f5cc6952de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=45fb2c91a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=63933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk oldIdentity="no identity" subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f5cc6952de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identity=63933 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45fb2c91a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=63933 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5cc6952de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2001 identity=63933 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a0ed928a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdf090ff9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=32642 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=fdf090ff9e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=32642 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a0ed928a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identity=6725 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl oldIdentity="no identity" subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fd85aaf56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1202 identity=63933 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a0ed928a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2966 identity=6725 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Successful endpoint creation" containerID=2fd85aaf56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1202 identity=63933 ipv4=10.0.0.121 ipv6= k8sPodName=kube-system/coredns-67659f764b-bfv5d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=11c67786e3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2692 identity=5741 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=11c67786e3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2692 identity=5741 ipv4=10.0.0.95 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dvtqp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 b0af7c34-2f66-44c1-aa02-9a33b96b9990 default }" containerID=52fd02000f75eebe70b68641adaa15e28a362cf65f2e1fcbde53144fc3e0022b datapathConfiguration="&{false false false false false }" interface=lxc4e96a2004c01 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45fb2c91a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3460 identity=63933 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=45fb2c91a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=63933 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f5cc6952de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2001 identity=63933 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5cc6952de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2001 identity=63933 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-67659f764b-4wrpg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fdf090ff9e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4071 identity=32642 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdf090ff9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4071 identity=32642 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6a0ed928a3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2966 identity=6725 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a0ed928a3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2966 identity=6725 ipv4=10.0.0.73 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c96zl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=59007 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=59007 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b599de2ead datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=940 identity=59007 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b599de2ead datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=940 identity=59007 ipv4=10.0.0.61 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ltlk9 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=36990 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2342 identity=36990 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52fd02000f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2342 identity=36990 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52fd02000f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2342 identity=36990 ipv4=10.0.0.234 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-4jc59 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45fb2c91a0 endpointID=3460 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-xbxgk subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=45fb2c91a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=63933 ipv4=10.0.0.206 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-xbxgk subsys=endpoint level=info msg="Delete endpoint request" containerID=fdf090ff9e endpointID=4071 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-ss78j subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=cc7f08ff-3bef-4927-acaa-413f9698b695 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=fdf090ff9e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4071 identity=32642 ipv4=10.0.0.141 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-ss78j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 3e7108f0-e137-4cdb-a59d-d3f4134e9c2b default }" containerID=d4ab43a95311102b2a315b5451f53351efa79281ff55853177a493563fdec438 datapathConfiguration="&{false false false false false }" interface=lxce5f17a9f78dc k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4ab43a953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4ab43a953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d4ab43a953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identity=32377 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4ab43a953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2366 identity=32377 ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4ab43a953 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2366 identity=32377 ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4ab43a953 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2366 identity=32377 ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=daemon level=info msg="Delete endpoint request" containerID=d4ab43a953 endpointID=2366 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-724ww subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f98d9a16-219d-46d3-8f86-005ae4ad85d3 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d4ab43a953 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2366 identity=32377 ipv4=10.0.0.16 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-724ww subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 88ed3df7-f8ea-4e60-a051-56468b955645 default }" containerID=25445b56e88d1898503e9323d8df948cbd504d7e44c45f3cf810f6a218ff1e41 datapathConfiguration="&{false false false false false }" interface=lxc0de59b272e4b k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25445b56e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25445b56e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25445b56e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=2948 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25445b56e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=641 identity=2948 ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=25445b56e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=641 identity=2948 ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=25445b56e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=641 identity=2948 ipv4=10.0.0.204 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-cvn66 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.166 63e2c936-3f4a-42c3-8a6e-274b2e0c3121 default }" containerID=b5d000b91d867e3de0e23f14bf106de51b320bd90a0db277140e026788a467d8 datapathConfiguration="&{false false false false false }" interface=lxc0441719df562 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5d000b91d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5d000b91d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5d000b91d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identity=43435 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5d000b91d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2587 identity=43435 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5d000b91d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2587 identity=43435 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5d000b91d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2587 identity=43435 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b5d000b91d endpointID=2587 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-qvd46 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=52ed408a-d9e5-4a56-84a7-1e0e777109a5 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b5d000b91d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2587 identity=43435 ipv4=10.0.0.166 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-qvd46 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=5aedfaa5-a348-448f-889a-8ef0b58b36ba] Description:}]" policyAddRequest=77ad01e2-8560-41e6-9aa8-68952978d45d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=77ad01e2-8560-41e6-9aa8-68952978d45d policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=36810756-ead7-4d9b-b520-d81161b75678] Description:}]" policyAddRequest=b58c1eb4-db60-48d7-a246-a7ddc3a68f1c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=b58c1eb4-db60-48d7-a246-a7ddc3a68f1c policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 cfa18c0c-641e-4ece-8cab-d46ed39bc0d3 default }" containerID=1a44ad6c721d509a8b16cd201d48365113339f70349e427f4c9c99eff10a7f39 datapathConfiguration="&{false false false false false }" interface=lxc13e7d50a6d4f k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=21186 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=21186 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a44ad6c72 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=662 identity=21186 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a44ad6c72 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=662 identity=21186 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-f2ff4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.228 be636f57-3938-44ba-b6d2-c0051062d885 default }" containerID=3b204cefe50d9444246b57d7546f4d10c40ae2ce10ace30c49e0366707e0220e datapathConfiguration="&{false false false false false }" interface=lxc1bfea11c6449 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b204cefe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b204cefe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b204cefe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identity=10437 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b204cefe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2169 identity=10437 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b204cefe5 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2169 identity=10437 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b204cefe5 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2169 identity=10437 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-j8ztl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 dfc1a290-c15c-4ab5-8c82-e8d4fe39f0a5 default }" containerID=ab3e090f5e580775d7ffa4443e4fd0800c76a32af14b70a7bb10bab7324b06cf datapathConfiguration="&{false false false false false }" interface=lxc675d8e09ba29 k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=810 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=810 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab3e090f5e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=780 identity=810 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab3e090f5e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=780 identity=810 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dvw7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 33a9ca86-9ac5-4e12-b472-7e39e397523b default }" containerID=79279dfb65fa160570942494c6db59b9983c64b07e0efa358728826de7ef0838 datapathConfiguration="&{false false false false false }" interface=lxc90b9d8e697b4 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79279dfb65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79279dfb65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79279dfb65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=18945 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79279dfb65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3187 identity=18945 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 f7bf35f1-f657-460b-a091-fd3e71ef6ecc default }" containerID=8d3f5baf287bc83bf20f604a5eafb901a6bebaf785eb53a459d0c692f0c2bab4 datapathConfiguration="&{false false false false false }" interface=lxc58db5d3e9df8 k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d3f5baf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d3f5baf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d3f5baf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d3f5baf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2806 identity=24998 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79279dfb65 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3187 identity=18945 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79279dfb65 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3187 identity=18945 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8d3f5baf28 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2806 identity=24998 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d3f5baf28 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2806 identity=24998 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d3f5baf28 endpointID=2806 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8d3f5baf28 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2806 identity=24998 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-db5a19b6-eddb-428c-9abe-cef8ab1b1ff3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 e048f7b5-c4fb-4c5e-9cd9-441017c82bcd default }" containerID=ec14fd5684f5b3d8e8bbcfc6621eb9a7f3d7ed5f6ac3940ae9afb0c6530b4df7 datapathConfiguration="&{false false false false false }" interface=lxc2386329319cf k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=10540 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3135 identity=10540 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec14fd5684 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3135 identity=10540 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec14fd5684 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3135 identity=10540 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=a680ff86-06ac-4b54-a7ae-721072a1eacd] Description:}]" policyAddRequest=9801539f-7f23-40b7-8147-323660e839e3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=9801539f-7f23-40b7-8147-323660e839e3 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.202 d058bec9-d5a3-47d5-8565-777bb8b7d86d default }" containerID=e949e4c61b117cc5a3d0a65b77750be989b52610c862422e5e0b6b2b773f5b57 datapathConfiguration="&{false false false false false }" interface=lxc3f1f3ef4f0fa k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e949e4c61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e949e4c61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e949e4c61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=11533 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e949e4c61b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=11533 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e949e4c61b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=74 identity=11533 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e949e4c61b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=74 identity=11533 ipv4=10.0.0.202 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010916174063603285 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.184 814cf961-b41b-4163-9a7c-48948bb38c94 default }" containerID=0302d2c35ddaa1eaddecd14284258245ace011a776c7b239790bff77fee3c116 datapathConfiguration="&{false false false false false }" interface=lxca3323cc0b45d k8sPodName=monitoring/node-feature-discovery-worker-f5n9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0302d2c35d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0302d2c35d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0302d2c35d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=9705 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0302d2c35d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=499 identity=9705 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 9665df4e-26e5-4f4f-955f-1270bc4f3809 default }" containerID=52735987365fc7bcb693c4e8dfe176be3e9a5d536678ac3425e470e56e8f2e84 datapathConfiguration="&{false false false false false }" interface=lxc4c603bde7449 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5273598736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 03908dcd-f2b6-4e90-bcaa-2e6c49223ef8 default }" containerID=2045c70166cf84d766058b059ad7f2e1099b5e5bc86d873747aa5dbb18d6ed07 datapathConfiguration="&{false false false false false }" interface=lxc32eedd8a4ec9 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=5273598736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=2045c70166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2045c70166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5273598736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=50635 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=5273598736 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1193 identity=50635 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2045c70166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identity=15220 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2045c70166 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3725 identity=15220 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0302d2c35d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=499 identity=9705 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0302d2c35d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=499 identity=9705 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-f5n9f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2045c70166 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3725 identity=15220 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=2045c70166 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3725 identity=15220 ipv4=10.0.0.134 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-ktn8l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5273598736 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1193 identity=50635 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=5273598736 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1193 identity=50635 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4nn9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 2d2cd8e5-7643-491f-a2dd-0c7b6c20f3a7 default }" containerID=b82308d1e1b12c266d87922650c9853eb5e210b496e1d1d0e284d54090cec1b4 datapathConfiguration="&{false false false false false }" interface=lxc1371341c4262 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b82308d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b82308d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b82308d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identity=19637 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b82308d1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3462 identity=19637 ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b82308d1e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3462 identity=19637 ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b82308d1e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3462 identity=19637 ipv4=10.0.0.242 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-675gk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=897 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00897 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00897 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00897 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00897:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=897 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 e9a42fc2-a6ab-4a57-a9dc-5ae4741e22aa default }" containerID=66a3b7eeb761575de35b5d423e06385f26719f1a0085b9d7a0e149d69cd0a996 datapathConfiguration="&{false false false false false }" interface=lxc053e95402aaf k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66a3b7eeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66a3b7eeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66a3b7eeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=34335 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=66a3b7eeb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3852 identity=34335 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66a3b7eeb7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3852 identity=34335 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=endpoint level=info msg="Successful endpoint creation" containerID=66a3b7eeb7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3852 identity=34335 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=66a3b7eeb7 endpointID=3852 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lvk6j subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=67004f30-9093-4e2a-aa27-847233fd65e4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=66a3b7eeb7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3852 identity=34335 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lvk6j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 8ad22d90-8945-4d4e-a6b0-9721e97590c2 default }" containerID=63efc7ce803292049ad86af6bae20d56128ed135c7c9faeb30d73f4b0c15e5b9 datapathConfiguration="&{false false false false false }" interface=lxcf51b014f6bdd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=56793 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=89 identity=56793 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63efc7ce80 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=89 identity=56793 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj subsys=endpoint level=info msg="Successful endpoint creation" containerID=63efc7ce80 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=89 identity=56793 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-bdmnj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.16 038edfdc-14b0-401c-8d63-f2cca712ca90 default }" containerID=66e226369a390511635aeef47caacff0f4894cbb61813e36d3ef8e757c1583ae datapathConfiguration="&{false false false false false }" interface=lxc812b1d9eaf47 k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=66e226369a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=66e226369a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.98 56050e46-024c-4498-bf40-1f3cc92edf88 default }" containerID=e73889622981e448f8322c37de56052ede7132e449a448012199df8b756869d9 datapathConfiguration="&{false false false false false }" interface=lxcd6a8a8ae40cb k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e738896229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e738896229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=66e226369a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=3431 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=66e226369a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=3431 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e738896229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=51868 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e738896229 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=530 identity=51868 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=66e226369a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3204 identity=3431 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf subsys=endpoint level=info msg="Successful endpoint creation" containerID=66e226369a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3204 identity=3431 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-79479f9b97-jc8vf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e738896229 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=530 identity=51868 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=e738896229 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=530 identity=51868 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-pbh2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.35 3cb90a74-0e60-4b9f-924c-a9de32269164 default }" containerID=aa6f9916c4c8e8d10620504fc9d95a033c5791c50dbb16d87cacbc120c74c54c datapathConfiguration="&{false false false false false }" interface=lxcb66577287418 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa6f9916c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa6f9916c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aa6f9916c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=60585 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa6f9916c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=240 identity=60585 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa6f9916c4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=240 identity=60585 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa6f9916c4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=240 identity=60585 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aa6f9916c4 endpointID=240 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lk2bh subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=ab982d03-4948-4bca-8cda-c8cfaf7a09fd k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=aa6f9916c4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=240 identity=60585 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk2bh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 df02c9eb-9a85-4274-9731-8f335e02a884 default }" containerID=8b4caf6bce27d3986a0334f3ec4d39019b2955f8bd2e480e13d42e21142e30da datapathConfiguration="&{false false false false false }" interface=lxc30f17ac5c7b2 k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b4caf6bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b4caf6bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b4caf6bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b4caf6bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=24998 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b4caf6bce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=295 identity=24998 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b4caf6bce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=295 identity=24998 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 dd62e840-dd1f-4c42-a910-3cbc655de765 default }" containerID=fbaea6842cd5a25e5cc2db074e96922cb838d8af1e918c4396bd0976576ca8e0 datapathConfiguration="&{false false false false false }" interface=lxcbf604a34bb50 k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbaea6842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbaea6842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fbaea6842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbaea6842c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3637 identity=24998 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbaea6842c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3637 identity=24998 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbaea6842c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3637 identity=24998 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 502cdcca-0415-4623-9c38-3a17e3533b67 default }" containerID=c4a3d4ce441d286b5281cca235f2a51221fd2fa60254cf5a4521171568ae15af datapathConfiguration="&{false false false false false }" interface=lxcd1406c12aa40 k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4a3d4ce44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4a3d4ce44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4a3d4ce44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=2138 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c4a3d4ce44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=2138 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 ede933d7-d8b8-465c-9451-fd0dadc2b02b default }" containerID=cf26cad45d0acc76d4370a0c7e5f67cc14496b0a2e8d0d122c93ac4ab55dd262 datapathConfiguration="&{false false false false false }" interface=lxce48512f63dcd k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf26cad45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf26cad45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf26cad45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=41937 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf26cad45d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=41937 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 106a32cf-4a27-430b-911a-555085a4bd9b default }" containerID=931fefe5e17746e7b3771d3d5a57d2741b3471b4b7c574535d637f76f643cdf9 datapathConfiguration="&{false false false false false }" interface=lxcf07139c78632 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=931fefe5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=931fefe5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=931fefe5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=7770 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=931fefe5e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=7770 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c4a3d4ce44 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=678 identity=2138 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4a3d4ce44 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=678 identity=2138 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-qqfvz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cf26cad45d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=27 identity=41937 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf26cad45d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=27 identity=41937 ipv4=10.0.0.203 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=931fefe5e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=393 identity=7770 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=931fefe5e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=393 identity=7770 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b4caf6bce endpointID=295 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8b4caf6bce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=295 identity=24998 ipv4=10.0.0.108 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0edc9468-2c5a-4d37-b3a4-a653a6b9cbdc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 bbfd1270-8d16-46b8-8386-a54fc74c52c9 default }" containerID=03b43563d163e8e5dbc05e2fc121a495e6c0988f286466627c72a480c893ef25 datapathConfiguration="&{false false false false false }" interface=lxc0fe8d448133d k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03b43563d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03b43563d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=endpoint level=info msg="Identity of endpoint changed" containerID=03b43563d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03b43563d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=24998 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03b43563d1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1614 identity=24998 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=endpoint level=info msg="Successful endpoint creation" containerID=03b43563d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1614 identity=24998 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fbaea6842c endpointID=3637 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=fbaea6842c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3637 identity=24998 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b565e180-f78b-49b4-a254-64d7d8bae3fc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 f8f1faa5-eebb-4384-87cb-09057945b460 default }" containerID=c7a38fee7f30cea44c4065abb7d6c6120f594bade96032726b70cf8793da6a97 datapathConfiguration="&{false false false false false }" interface=lxc4891229d9424 k8sPodName=monitoring/vector-5lxz7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7a38fee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7a38fee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c7a38fee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=32432 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7a38fee7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=32432 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7a38fee7f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=863 identity=32432 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7a38fee7f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=863 identity=32432 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/vector-5lxz7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 1f657fea-f44c-4143-b627-fa21b0212d5b default }" containerID=9333ce67964f6ad31aaa15bf28657772916fcfcf770a151b4c68a7e4d036fb35 datapathConfiguration="&{false false false false false }" interface=lxcde78eb4fd82b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9333ce6796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9333ce6796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9333ce6796 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=32072 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9333ce6796 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=22 identity=32072 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9333ce6796 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=22 identity=32072 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9333ce6796 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=22 identity=32072 ipv4=10.0.0.115 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 0ea8b885-502f-454d-a7e2-9df1a7a6765c default }" containerID=82f3344780ff83d73f4dce32133d4b02e437f88db2207311c833555ef4c7978f datapathConfiguration="&{false false false false false }" interface=lxc2d68ffbfe639 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=43500 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2345 identity=43500 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82f3344780 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2345 identity=43500 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82f3344780 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2345 identity=43500 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03b43563d1 endpointID=1614 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=03b43563d1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1614 identity=24998 ipv4=10.0.0.6 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0278b-a063-4c39-95e8-1c6088fb824f subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 dfadc62b-4f10-4ccf-809b-6e17cca66601 default }" containerID=c99475ba84bf68861aa0eb9919910275d69afc10516e9f1676d63db7fbe03bdc datapathConfiguration="&{false false false false false }" interface=lxc7937875767c6 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=9669 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=9669 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c99475ba84 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3047 identity=9669 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c99475ba84 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3047 identity=9669 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 ac49c178-ec1d-483a-9818-f30295680b55 default }" containerID=fde09ed23f0e139157a23239b8abb69c8169bd55fef0926d74989730e9bfd446 datapathConfiguration="&{false false false false false }" interface=lxc7b06109e9fd8 k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fde09ed23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=817 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fde09ed23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=817 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fde09ed23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=817 identity=1259 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fde09ed23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=817 identity=1259 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fde09ed23f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=817 identity=1259 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv subsys=endpoint level=info msg="Successful endpoint creation" containerID=fde09ed23f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=817 identity=1259 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-zt5cv subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 1b4126c2-4ed6-4bd5-be87-06665e2be20c default }" containerID=ec9ee146c7e60e6ea50b1e54adb278ed40c21880d7a4acd1849c2bab0f28455e datapathConfiguration="&{false false false false false }" interface=lxc0a6f4f951c70 k8sPodName=openstack/memcached-memcached-6479589586-glsms labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=9227 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1536 identity=9227 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec9ee146c7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1536 identity=9227 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec9ee146c7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1536 identity=9227 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-glsms subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.151 33006111-af08-4924-8cac-c9813a7631da default }" containerID=7b842f84d7a65c2acc80af8fe2e0d70e85553b42ac834f30af2223ef4cd42293 datapathConfiguration="&{false false false false false }" interface=lxc361c364f729a k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b842f84d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b842f84d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b842f84d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b842f84d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=24998 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b842f84d7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2 identity=24998 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b842f84d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2 identity=24998 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=daemon level=info msg="Delete endpoint request" containerID=7b842f84d7 endpointID=2 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7b842f84d7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2 identity=24998 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-145a3802-e025-4c1a-ae8c-607a84f31a05 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 b1d30f89-eea3-4c0d-bce1-344aa4d69cbc default }" containerID=05cfaa838cbb9be7e6c844ced9dbaac83ac5efa0798a54d84eb4dc26e737be36 datapathConfiguration="&{false false false false false }" interface=lxc38a19db01f1c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05cfaa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05cfaa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05cfaa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=59225 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05cfaa838c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=59225 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=05cfaa838c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3521 identity=59225 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05cfaa838c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3521 identity=59225 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 f045b5ec-ca9c-4342-b0f1-956fe569cef9 default }" containerID=1e7e850debf8ea5200c99615c164e72d13976d1213fce03357aec156df76b854 datapathConfiguration="&{false false false false false }" interface=lxc8095a1df5d75 k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=5820 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1834 identity=5820 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 53f0b555-810a-4367-b942-b4660d6d141e default }" containerID=2fb280fabb04b9c98d0c5cb8cd303c80a057a2f2197c1cff334e7d39fb208517 datapathConfiguration="&{false false false false false }" interface=lxc46946b42f0d5 k8sPodName=openstack/keystone-credential-setup-fqg9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fb280fabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fb280fabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fb280fabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=14918 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fb280fabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=14918 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e7e850deb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1834 identity=5820 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e7e850deb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1834 identity=5820 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-api-7fc4458bbb-dm829 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2fb280fabb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1459 identity=14918 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fb280fabb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1459 identity=14918 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fb280fabb endpointID=1459 k8sNamespace=openstack k8sPodName=keystone-credential-setup-fqg9k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=0de1e0e7-4953-4a0a-a73d-e336d2fa59a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2fb280fabb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1459 identity=14918 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/keystone-credential-setup-fqg9k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 f41f51b8-7569-43f9-9016-553c406952b4 default }" containerID=1d7b761de0aa125d2041a202ac59b410c767f9cf6dd8e4a1dbc83d885cbc98e7 datapathConfiguration="&{false false false false false }" interface=lxcc951ac55538e k8sPodName=openstack/keystone-db-init-kq9xt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d7b761de0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d7b761de0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1d7b761de0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=8564 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d7b761de0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3754 identity=8564 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d7b761de0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3754 identity=8564 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d7b761de0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3754 identity=8564 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d7b761de0 endpointID=3754 k8sNamespace=openstack k8sPodName=keystone-db-init-kq9xt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=02ea09e6-b8a4-455f-b4f1-83cbf22723b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1d7b761de0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3754 identity=8564 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-db-init-kq9xt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 ba396609-fe5d-46ba-aa30-aa9e8cd6194d default }" containerID=12fc5d9ceb33eb242556d16cdd61a1fd1936b0e29c89ceb36fc8e4acd4ac21c0 datapathConfiguration="&{false false false false false }" interface=lxc3231e9b78ff6 k8sPodName=openstack/keystone-fernet-setup-2587h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=53270 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=53270 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12fc5d9ceb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=451 identity=53270 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=endpoint level=info msg="Successful endpoint creation" containerID=12fc5d9ceb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=451 identity=53270 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=12fc5d9ceb endpointID=451 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2587h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8b318a84-5f7f-4843-bb66-b8e41da133f6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=12fc5d9ceb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=451 identity=53270 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/keystone-fernet-setup-2587h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 63dd6799-f2fb-4f1a-a96a-d21525e485db default }" containerID=d022bb35bdc9719e4e6cc8ae54ff637fcd7751a4d751d182ce9462f6f00db0dc datapathConfiguration="&{false false false false false }" interface=lxcc9236e0f71a9 k8sPodName=openstack/keystone-db-sync-7ft7p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d022bb35bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d022bb35bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d022bb35bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=13237 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d022bb35bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=394 identity=13237 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d022bb35bd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=394 identity=13237 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d022bb35bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=394 identity=13237 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d022bb35bd endpointID=394 k8sNamespace=openstack k8sPodName=keystone-db-sync-7ft7p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=48a1a63a-adbb-4a64-9bff-3da92fd4a34c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d022bb35bd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=394 identity=13237 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/keystone-db-sync-7ft7p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 454a1d23-4a8d-4cff-999b-db71d62fad77 default }" containerID=26116174401e19a93da68a516edaf9c9c30015e9ab0c22d0c0b10f5fbfda8205 datapathConfiguration="&{false false false false false }" interface=lxc9ef7f810ca47 k8sPodName=openstack/keystone-rabbit-init-8z9mn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2611617440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2611617440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2611617440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=45002 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2611617440 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1114 identity=45002 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2611617440 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1114 identity=45002 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=endpoint level=info msg="Successful endpoint creation" containerID=2611617440 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1114 identity=45002 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=daemon level=info msg="Delete endpoint request" containerID=2611617440 endpointID=1114 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8z9mn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=24a60ea5-576c-4413-9e53-609fca6d3417 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2611617440 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1114 identity=45002 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8z9mn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 42b22eb0-c0a2-4d92-b1c2-4d9158efdeb5 default }" containerID=64b6b087127cce5a43af474ac995762bb6b770eb2eccef23856a812d6294559c datapathConfiguration="&{false false false false false }" interface=lxc67aebc9d80fc k8sPodName=openstack/keystone-domain-manage-rlrjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64b6b08712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64b6b08712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64b6b08712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=34933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64b6b08712 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=248 identity=34933 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64b6b08712 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=248 identity=34933 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=64b6b08712 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=34933 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=64b6b08712 endpointID=248 k8sNamespace=openstack k8sPodName=keystone-domain-manage-rlrjl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1e9c85eb-e6db-448b-99d8-0194f198c007 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=64b6b08712 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=248 identity=34933 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-domain-manage-rlrjl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 5aefc04a-4929-4c64-a091-975e7e463579 default }" containerID=1423a6c655acd6c50ce0ed32d341833759cefb4fb9db02a4a81096d3d7b12e46 datapathConfiguration="&{false false false false false }" interface=lxcfd1060b01099 k8sPodName=openstack/keystone-bootstrap-6h892 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identity=12273 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2339 identity=12273 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1423a6c655 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2339 identity=12273 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1423a6c655 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2339 identity=12273 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1423a6c655 endpointID=2339 k8sNamespace=openstack k8sPodName=keystone-bootstrap-6h892 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=56b3f417-6e62-42ef-9a02-7808e0c9165d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1423a6c655 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2339 identity=12273 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/keystone-bootstrap-6h892 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 c93ef157-0548-4218-97af-d0d160614251 default }" containerID=52a9a42465bd254963a373b427afd7abf89464a6667a1b90254ef25e8df659dd datapathConfiguration="&{false false false false false }" interface=lxc9b9cf7b1e0b1 k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52a9a42465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52a9a42465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52a9a42465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52a9a42465 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3005 identity=24998 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52a9a42465 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3005 identity=24998 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=52a9a42465 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3005 identity=24998 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=daemon level=info msg="Delete endpoint request" containerID=52a9a42465 endpointID=3005 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=52a9a42465 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3005 identity=24998 ipv4=10.0.0.94 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42a2e4cf-38bc-4bba-9cf4-37cab9578b79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 695f27f6-da91-448d-b4f8-590844b8c333 default }" containerID=d88d24f24141fd529240bab3d2bf2d02a0c51efa185e9510722329a7ec09a0fe datapathConfiguration="&{false false false false false }" interface=lxc971a86e3a125 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d88d24f241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d88d24f241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d88d24f241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=3253 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d88d24f241 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=3253 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d88d24f241 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=538 identity=3253 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d88d24f241 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=538 identity=3253 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 ca31429b-1867-491f-beda-18c95fd1a4ad default }" containerID=53948c45c6715b1c779725ddf3844318ebac442e8340c4f664eceeabaa6654d1 datapathConfiguration="&{false false false false false }" interface=lxcda8ecddba3fa k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=21232 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=302 identity=21232 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 b2cc76f1-95d5-4ab4-9ab6-2a16821b9ff1 default }" containerID=fb140e2c89725ae0089740903f8ccf6faffb6bc2b9ea5a6eb0723fc89a57339c datapathConfiguration="&{false false false false false }" interface=lxc6eac2fdb7142 k8sPodName=openstack/barbican-db-init-cd57k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb140e2c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb140e2c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb140e2c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=4430 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb140e2c89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=4430 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53948c45c6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=302 identity=21232 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53948c45c6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=302 identity=21232 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/barbican-api-688d6544bb-ppcb5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb140e2c89 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=796 identity=4430 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb140e2c89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=796 identity=4430 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb140e2c89 endpointID=796 k8sNamespace=openstack k8sPodName=barbican-db-init-cd57k subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=9015112d-7170-4d1e-8e07-6af4c162e1a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fb140e2c89 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=796 identity=4430 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/barbican-db-init-cd57k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 089170ab-ce95-4f98-8cb3-61a4a1257e0e default }" containerID=e5011e87ab134c2f685d11a260b52d3a778f0bb4a09feb954c4fc8621c1e7428 datapathConfiguration="&{false false false false false }" interface=lxc4a76ab499767 k8sPodName=openstack/barbican-db-sync-d25z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5011e87ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5011e87ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5011e87ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=47340 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5011e87ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=47340 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5011e87ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1285 identity=47340 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5011e87ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1285 identity=47340 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=daemon level=info msg="Delete endpoint request" containerID=e5011e87ab endpointID=1285 k8sNamespace=openstack k8sPodName=barbican-db-sync-d25z4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=1b90b019-b805-4139-b7aa-2aa3358e60c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e5011e87ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1285 identity=47340 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/barbican-db-sync-d25z4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 c6c143b3-ba09-4b85-85ca-901f5a9e871a default }" containerID=06a618614da4336c6d97637ab05fa2966912b5c6366d778625e84526191683ae datapathConfiguration="&{false false false false false }" interface=lxcf0a63b21d890 k8sPodName=openstack/barbican-rabbit-init-bzhxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=3339 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=3339 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06a618614d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3540 identity=3339 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=06a618614d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3540 identity=3339 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03530847998701422 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=06a618614d endpointID=3540 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-bzhxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e644cd06-b2fb-4604-9c81-1a725c569949 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=06a618614d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3540 identity=3339 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-rabbit-init-bzhxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 e94ffa9a-8fb1-4fb6-aa61-f58094cf72d2 default }" containerID=bf7795a34d0ffc91520780634b8523c306aae75801cd156daee7555c19153786 datapathConfiguration="&{false false false false false }" interface=lxca2838e30b77b k8sPodName=openstack/barbican-ks-service-2w8dm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf7795a34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf7795a34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bf7795a34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=50837 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bf7795a34d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2694 identity=50837 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf7795a34d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2694 identity=50837 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf7795a34d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2694 identity=50837 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=daemon level=info msg="Delete endpoint request" containerID=bf7795a34d endpointID=2694 k8sNamespace=openstack k8sPodName=barbican-ks-service-2w8dm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=72668f40-b580-4803-8dfc-87fbdd097c3d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bf7795a34d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2694 identity=50837 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-ks-service-2w8dm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 77c3b3c1-e61c-4159-8e82-aa002219e142 default }" containerID=d13521725d587cba2bafc3baceb3e7038d3033893291d53199a22b38e4d9e28a datapathConfiguration="&{false false false false false }" interface=lxc817424b4539e k8sPodName=openstack/barbican-ks-endpoints-h755x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d13521725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d13521725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d13521725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=52051 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d13521725d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1042 identity=52051 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d13521725d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1042 identity=52051 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=endpoint level=info msg="Successful endpoint creation" containerID=d13521725d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1042 identity=52051 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d13521725d endpointID=1042 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-h755x subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eb4b09e6-7717-4cb8-8127-b6ae0d34a5a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d13521725d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1042 identity=52051 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-ks-endpoints-h755x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 0afaae9f-3fe4-4518-9c4b-fad8b3e4d216 default }" containerID=3cd8f6fba82b3731d79fa2c19a9ac095ba859f0442e34f89a9dbb5b4247e899d datapathConfiguration="&{false false false false false }" interface=lxca93f852e861e k8sPodName=openstack/barbican-ks-user-jmpcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cd8f6fba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cd8f6fba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cd8f6fba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identity=1711 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cd8f6fba8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1304 identity=1711 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cd8f6fba8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1304 identity=1711 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cd8f6fba8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1304 identity=1711 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3cd8f6fba8 endpointID=1304 k8sNamespace=openstack k8sPodName=barbican-ks-user-jmpcs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b8a0f026-91c3-469c-a6f2-1065bfae92ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3cd8f6fba8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1304 identity=1711 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/barbican-ks-user-jmpcs subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.226 d202d4e2-85d7-4210-84e0-14815da32cab default }" containerID=01ae2fd7cd3c42fdf5c6351392bc7072569903f5a54f3e4cce522d76ab470f1f datapathConfiguration="&{false false false false false }" interface=lxca1a5c8ed72fe k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01ae2fd7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01ae2fd7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01ae2fd7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=22562 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01ae2fd7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=22562 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01ae2fd7cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=131 identity=22562 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=01ae2fd7cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=131 identity=22562 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-vsxfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 b706ea37-c35b-4bbc-97b1-50e4e27c0024 default }" containerID=62c33d9c22ab2c70ea77fe77a64bd39c8dc60475f768eb5a7e1c8555cc12c685 datapathConfiguration="&{false false false false false }" interface=lxce70b633c69ba k8sPodName=openstack/rook-ceph-detect-version-qp88s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62c33d9c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62c33d9c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=826c889a-f22e-427c-afb5-4b9659245929,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=826c889a-f22e-427c-afb5-4b9659245929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=826c889a-f22e-427c-afb5-4b9659245929;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=826c889a-f22e-427c-afb5-4b9659245929;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62c33d9c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=4066 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=826c889a-f22e-427c-afb5-4b9659245929,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=826c889a-f22e-427c-afb5-4b9659245929,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62c33d9c22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=4066 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=62c33d9c22 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=4066 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=endpoint level=info msg="Successful endpoint creation" containerID=62c33d9c22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=4066 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=daemon level=info msg="Delete endpoint request" containerID=62c33d9c22 endpointID=202 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-qp88s subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=826c889a-f22e-427c-afb5-4b9659245929 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=826c889a-f22e-427c-afb5-4b9659245929 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=62c33d9c22 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=4066 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-qp88s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 da0bc085-5788-402d-a25d-a437e3078bbf default }" containerID=6ddc66a570457ac426041dc81088c47f23b8fdcb53c8f995103360f58636256e datapathConfiguration="&{false false false false false }" interface=lxc6d682cdcf98e k8sPodName=openstack/ceph-object-controller-detect-version-gscjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ddc66a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ddc66a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6ddc66a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=34598 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ddc66a570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=34598 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ddc66a570 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=584 identity=34598 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ddc66a570 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=584 identity=34598 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=daemon level=info msg="Delete endpoint request" containerID=6ddc66a570 endpointID=584 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-gscjd subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a39ae31e-8f8f-4401-9794-fff2718ab49a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=6ddc66a570 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=584 identity=34598 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gscjd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 8cfd6f72-3f94-4dda-a1bd-7d28b00be847 default }" containerID=f2014e13159affc17d06f4dcd7406f59b37a8c3dc1aad4406a0511b87cf24b4d datapathConfiguration="&{false false false false false }" interface=lxcb3469705069e k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2014e1315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2014e1315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2014e1315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=24998 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2014e1315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1908 identity=24998 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2014e1315 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1908 identity=24998 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2014e1315 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1908 identity=24998 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=daemon level=info msg="Delete endpoint request" containerID=f2014e1315 endpointID=1908 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f2014e1315 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1908 identity=24998 ipv4=10.0.0.210 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9985180-abdc-44ff-8cdf-d1627d576852 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 de09da0b-c640-468a-9a54-1862a17cff5c default }" containerID=3409e20382cc8262c888f0f3d346e2d5655bff21f00e657ebd246a7f434a2acf datapathConfiguration="&{false false false false false }" interface=lxce8b004aab5bc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3409e20382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3409e20382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3409e20382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=16824 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3409e20382 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2201 identity=16824 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3409e20382 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2201 identity=16824 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3409e20382 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2201 identity=16824 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 ca8c077a-0359-45c8-9648-6adeaa769e2d default }" containerID=7600c4ff99a4596d174fc615ba9b247573465a7920dc0f5fb23a1228136b2819 datapathConfiguration="&{false false false false false }" interface=lxcb5573db35e2f k8sPodName=openstack/glance-db-init-fv2kg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7600c4ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7600c4ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27d278e0-117e-4f60-937f-42441ad547a6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=27d278e0-117e-4f60-937f-42441ad547a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=27d278e0-117e-4f60-937f-42441ad547a6;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=27d278e0-117e-4f60-937f-42441ad547a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7600c4ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=17264 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=27d278e0-117e-4f60-937f-42441ad547a6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=27d278e0-117e-4f60-937f-42441ad547a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7600c4ff99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1503 identity=17264 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7600c4ff99 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1503 identity=17264 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7600c4ff99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1503 identity=17264 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7600c4ff99 endpointID=1503 k8sNamespace=openstack k8sPodName=glance-db-init-fv2kg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=27d278e0-117e-4f60-937f-42441ad547a6 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=27d278e0-117e-4f60-937f-42441ad547a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7600c4ff99 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1503 identity=17264 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-db-init-fv2kg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 10c88bd5-f502-4bba-8460-73a29bdafb99 default }" containerID=d13c4e3a23bdad2d0f6d40a5e163eaacd0c64c67d3cf2640e862383c48af58f6 datapathConfiguration="&{false false false false false }" interface=lxcae999aaf21e7 k8sPodName=openstack/glance-db-sync-6ct2j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d13c4e3a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d13c4e3a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d13c4e3a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identity=59122 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d13c4e3a23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2738 identity=59122 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d13c4e3a23 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2738 identity=59122 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=endpoint level=info msg="Successful endpoint creation" containerID=d13c4e3a23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2738 identity=59122 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d13c4e3a23 endpointID=2738 k8sNamespace=openstack k8sPodName=glance-db-sync-6ct2j subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=2c9ebdea-78f3-4410-94d1-eb4e81092e84 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d13c4e3a23 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2738 identity=59122 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/glance-db-sync-6ct2j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 107c682d-94e6-44fa-a779-e9d469ad8193 default }" containerID=74041a982058460742d4b378a872d393302083aa7e0e41527803e9f95b70aaa9 datapathConfiguration="&{false false false false false }" interface=lxc42fda5602758 k8sPodName=openstack/glance-rabbit-init-qk9xx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=26082 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4039 identity=26082 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74041a9820 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4039 identity=26082 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=endpoint level=info msg="Successful endpoint creation" containerID=74041a9820 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4039 identity=26082 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 a40866df-d896-4589-b158-60379da3fa08 default }" containerID=a5505972a9bc3389010ad1a8bec04906a1b811c9fa3f516839b371f2a78f6099 datapathConfiguration="&{false false false false false }" interface=lxc6ebe02a8051b k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5505972a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5505972a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5505972a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=31830 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5505972a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=429 identity=31830 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 b7a45720-e175-4c45-bba0-5b301c3610ee default }" containerID=97b433e72cca200b535abe29c9fc782fe01f3825eb708284eb0f3f493b961156 datapathConfiguration="&{false false false false false }" interface=lxc44bfc09e8986 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=97b433e72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=97b433e72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97b433e72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=7462 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97b433e72c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2499 identity=7462 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5505972a9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=429 identity=31830 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5505972a9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=429 identity=31830 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-pn4jd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=97b433e72c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2499 identity=7462 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=97b433e72c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2499 identity=7462 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-gch2d subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74041a9820 endpointID=4039 k8sNamespace=openstack k8sPodName=glance-rabbit-init-qk9xx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a7513e93-e0ae-4684-8073-5763e9e429e8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74041a9820 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4039 identity=26082 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-rabbit-init-qk9xx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e62642d7-c0e7-4582-bc20-148aff3162c5 default }" containerID=cbb27d790a48bd5e11ae837995236c81d9b456509d03b1a9a38b03f53af69091 datapathConfiguration="&{false false false false false }" interface=lxc7e13a250c8ec k8sPodName=openstack/glance-ks-service-bn7g7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbb27d790a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbb27d790a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbb27d790a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=20385 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbb27d790a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=20385 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cbb27d790a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=76 identity=20385 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbb27d790a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=20385 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbb27d790a endpointID=76 k8sNamespace=openstack k8sPodName=glance-ks-service-bn7g7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=7cb9f582-454e-4fd9-8e71-df8b44cce002 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cbb27d790a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=20385 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-ks-service-bn7g7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 713952c5-7fd4-43a7-9f08-14e2e6478025 default }" containerID=837bbe6236ccd98d9875240f866abefd82eac29d8cecaeb10db5db0b418ebb64 datapathConfiguration="&{false false false false false }" interface=lxc6233db151809 k8sPodName=openstack/glance-ks-endpoints-qddkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=837bbe6236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=837bbe6236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=837bbe6236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=61265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=837bbe6236 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=61265 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=837bbe6236 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2295 identity=61265 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=837bbe6236 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2295 identity=61265 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.156 b8db8230-4b7e-4127-ad05-7003d93204b4 default }" containerID=04e7b9e8d036d81bc1d4615515f644a0cd37799ee55ec77b9d3ab2904b42bd50 datapathConfiguration="&{false false false false false }" interface=lxc66b6b2f8e5c2 k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e7b9e8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e7b9e8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04e7b9e8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=18272 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e7b9e8d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3751 identity=18272 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04e7b9e8d0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3751 identity=18272 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e7b9e8d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3751 identity=18272 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04e7b9e8d0 endpointID=3751 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-vp6l5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=07b1b451-dd2c-47e2-97f9-5ab3ce222978 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=04e7b9e8d0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3751 identity=18272 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-vp6l5 subsys=endpoint level=info msg="Delete endpoint request" containerID=837bbe6236 endpointID=2295 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-qddkd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=b30cfca1-5273-4ad7-a1d6-1a2d8c54535a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=837bbe6236 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2295 identity=61265 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-ks-endpoints-qddkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 3bdb8b64-8bcc-4a76-8f13-3a99c9a8c1cc default }" containerID=ade9310eb1a350aa4fa2692ba75e10b4e6a14cb6d4128ce7e451a0c95ec8a980 datapathConfiguration="&{false false false false false }" interface=lxc72b53a7bb712 k8sPodName=openstack/glance-ks-user-454g4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=17539 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=269 identity=17539 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ade9310eb1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=269 identity=17539 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ade9310eb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=269 identity=17539 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ade9310eb1 endpointID=269 k8sNamespace=openstack k8sPodName=glance-ks-user-454g4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8b902aa0-f23f-48a1-add6-26929ebc78ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ade9310eb1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=269 identity=17539 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/glance-ks-user-454g4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 0af4e8e6-565f-4b87-9a0f-058fc1906c93 default }" containerID=4f4a45858f10f1c8e1f3585f2c93b51b8d020cd6c1675b27bc74a42f6bfcf400 datapathConfiguration="&{false false false false false }" interface=lxc0d67e6722d87 k8sPodName=openstack/glance-metadefs-load-h2jss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f4a45858f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f4a45858f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4f4a45858f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=34874 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f4a45858f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=34874 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f4a45858f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2638 identity=34874 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f4a45858f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2638 identity=34874 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f4a45858f endpointID=2638 k8sNamespace=openstack k8sPodName=glance-metadefs-load-h2jss subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=915fe1a6-aa5c-4236-b4a9-e84f9cf87fce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4f4a45858f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2638 identity=34874 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-metadefs-load-h2jss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 41d9255d-cd8d-4aeb-a2b2-bd0fc5155f8a default }" containerID=bc7f29b8952af6923daf9412a296787b78ac9cbe23f18e7c3afe67c80cd949bf datapathConfiguration="&{false false false false false }" interface=lxca916e20a9430 k8sPodName=openstack/glance-storage-init-g4mgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc7f29b895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc7f29b895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f67eea80-f243-4462-83c5-412e45287e2b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f67eea80-f243-4462-83c5-412e45287e2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f67eea80-f243-4462-83c5-412e45287e2b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=f67eea80-f243-4462-83c5-412e45287e2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc7f29b895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=17511 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f67eea80-f243-4462-83c5-412e45287e2b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=f67eea80-f243-4462-83c5-412e45287e2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc7f29b895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=17511 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bc7f29b895 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2584 identity=17511 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc7f29b895 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2584 identity=17511 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=daemon level=info msg="Delete endpoint request" containerID=bc7f29b895 endpointID=2584 k8sNamespace=openstack k8sPodName=glance-storage-init-g4mgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f67eea80-f243-4462-83c5-412e45287e2b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=f67eea80-f243-4462-83c5-412e45287e2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bc7f29b895 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2584 identity=17511 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-storage-init-g4mgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.135 68ec2cca-0306-4383-b45b-40a7cbfa1d05 default }" containerID=493242238bc7f5db8e00942bb01d64b340e60f9d0aeb3dc94c6d382f3a075f53 datapathConfiguration="&{false false false false false }" interface=lxcc9181c97f482 k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=493242238b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=493242238b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=493242238b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=13608 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=493242238b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2897 identity=13608 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=493242238b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2897 identity=13608 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=493242238b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2897 identity=13608 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/glance-api-6d8c5d6cf4-vll86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 b5805291-3908-4e28-b96d-9747b4fa29c9 default }" containerID=604a59790eaf00ed46b7c34fc7b9ed86ee40f0944ab61be3845519e3e5436711 datapathConfiguration="&{false false false false false }" interface=lxcfc72eff3545b k8sPodName=openstack/staffeln-api-695d6db858-tj2tf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=604a59790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=604a59790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.25 4d125f0d-e4d2-4bb4-ae75-d97e944046c9 default }" containerID=01ed1047cebb8c953947a2fd1871c89402a0a2d704a3d05c6c7ccca547f45952 datapathConfiguration="&{false false false false false }" interface=lxcfb87abf28403 k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=604a59790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=12428 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=604a59790e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1422 identity=12428 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=58696 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=58696 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 026263a8-d6c7-4cd8-b45d-d1158e871580 default }" containerID=c2d9dcc12a2f8b3a2f9932d083b146deb4c02b46c15a5b87661f1c4d82312518 datapathConfiguration="&{false false false false false }" interface=lxc9d82b4777b44 k8sPodName=openstack/staffeln-db-init-ld5w2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2d9dcc12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2d9dcc12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2d9dcc12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=50086 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2d9dcc12a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=17 identity=50086 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01ed1047ce datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=207 identity=58696 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=01ed1047ce datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=207 identity=58696 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-65668f4f69-t7h4k subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=604a59790e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1422 identity=12428 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf subsys=endpoint level=info msg="Successful endpoint creation" containerID=604a59790e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1422 identity=12428 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/staffeln-api-695d6db858-tj2tf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2d9dcc12a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=17 identity=50086 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2d9dcc12a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=17 identity=50086 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2d9dcc12a endpointID=17 k8sNamespace=openstack k8sPodName=staffeln-db-init-ld5w2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=b2788b8c-05fe-424f-a07f-f027830080d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c2d9dcc12a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=17 identity=50086 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/staffeln-db-init-ld5w2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 6651d891-31d9-42fa-8cfd-12c005dbdf1d default }" containerID=19873898afcd813bc20d1831875e8c3f986ea196e9dbca1840e6f71ba52ac188 datapathConfiguration="&{false false false false false }" interface=lxcb249bd4f8fa2 k8sPodName=openstack/staffeln-db-sync-24gpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19873898af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4018 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19873898af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4018 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e364efee-46a3-445c-9df4-f10748abee1b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e364efee-46a3-445c-9df4-f10748abee1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e364efee-46a3-445c-9df4-f10748abee1b;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e364efee-46a3-445c-9df4-f10748abee1b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19873898af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4018 identity=15170 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e364efee-46a3-445c-9df4-f10748abee1b,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e364efee-46a3-445c-9df4-f10748abee1b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19873898af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4018 identity=15170 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=19873898af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4018 identity=15170 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=19873898af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4018 identity=15170 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/staffeln-db-sync-24gpr subsys=daemon