level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.110621ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="62.161µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.378398ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="24.761µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.131931ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.47µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.2µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="59.172µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="59.251µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="64.601µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="404.237µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.383378ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.588382ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="64.152µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="59.311µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="286.325µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="132.532µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="80.281µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.580432ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="80.041µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.277104ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.615541ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.644741ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="67.121µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="51.221µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="127.052µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="282.916µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.231µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="225.154µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="835.306µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.252645ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.78µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="12.49µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.223" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.223}] 10.0.0.0/24 [] [] 10.0.0.242 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34301" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.38993535s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="52.821µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="59.391µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="69.681µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="17.001µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=349 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.339642098s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.977794ms file-path=/var/run/cilium/state/templates/98eadd34de13acf6b90a1871c4dc2a09f42e432a252c07266f87126cb1205bbe/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.186 25049e35-e4a2-47b9-99f2-6eddb396cf12 default }" containerID=7118bef596f84f161a33ee5b2406379535f3597cbd10d553d349fb99ec602926 datapathConfiguration="&{false false false false false }" interface=lxc9f279ad5637d k8sPodName=kube-system/coredns-7c96b6546b-frqth labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.188 ff3df47a-7a40-4dd3-bd74-aef6d253d99d default }" containerID=f3e669e8ec61e313e8cc767e7416a71ed286dff510396bb4c2ac4824079dc01b datapathConfiguration="&{false false false false false }" interface=lxc4e6f9d42d40e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7118bef596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=endpoint level=info msg="New endpoint" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7118bef596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7118bef596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=13101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7118bef596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=13101 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=17246 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1623 identity=17246 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4062 identity=4 identityLabels="reserved:health" ipv4=10.0.0.242 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.053809268s file-path=/var/run/cilium/state/templates/a5e12fc5cec6369de8701ff06606a5fe5434059ed5b846358c21561e3721abe3/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=7118bef596 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=292 identity=13101 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=endpoint level=info msg="Successful endpoint creation" containerID=7118bef596 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=292 identity=13101 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f3e669e8ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1623 identity=17246 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3e669e8ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1623 identity=17246 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4062 identity=4 ipv4=10.0.0.242 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f3e669e8ec endpointID=1623 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-shhc8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=c9eb7a04-d3a5-4170-b690-e3da774bd604 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f3e669e8ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1623 identity=17246 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-shhc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 6fcd568e-0e53-4b20-95dd-a3d4c3d63af9 default }" containerID=1e1cb229a0f9939c4bc83c3ac25813bbef129cfa04467fc148d8fb32181cca67 datapathConfiguration="&{false false false false false }" interface=lxc804d3acc0772 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e1cb229a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e1cb229a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e1cb229a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=24534 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=1e1cb229a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3062 identity=24534 ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e1cb229a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3062 identity=24534 ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e1cb229a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3062 identity=24534 ipv4=10.0.0.108 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-5fk9v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=349 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00349 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00349 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 e1dab6f7-48f5-4979-8363-bb2737c19285 default }" containerID=1af6fcf777e30fc618b64876f2281fce52ede2d1b9e8a72a7819fc3337adb881 datapathConfiguration="&{false false false false false }" interface=lxc349ea2c2abab k8sPodName=kube-system/coredns-67659f764b-vlwtm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1af6fcf777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1af6fcf777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1af6fcf777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=13101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1af6fcf777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=357 identity=13101 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1af6fcf777 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=357 identity=13101 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm subsys=endpoint level=info msg="Successful endpoint creation" containerID=1af6fcf777 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=357 identity=13101 ipv4=10.0.0.136 ipv6= k8sPodName=kube-system/coredns-67659f764b-vlwtm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.70 d9775271-9351-41b7-9157-1743d0e45e8f default }" containerID=ac045b14b12fe983a0d721c4d287b06cb92b16108d34c7d55c0ad183f896ae1c datapathConfiguration="&{false false false false false }" interface=lxc19b5c1deebac k8sPodName=kube-system/coredns-67659f764b-lcgft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac045b14b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac045b14b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ac045b14b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=13101 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac045b14b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=442 identity=13101 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac045b14b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=442 identity=13101 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac045b14b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=442 identity=13101 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-lcgft subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 8efd742d-ba35-4ed0-9eec-9ec1438dfbaf default }" containerID=4c3b4cc2eabb1a037205a40ca322101f42193e452b73774d6c2184fd50ed0c85 datapathConfiguration="&{false false false false false }" interface=lxc525f1f1055a3 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c3b4cc2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c3b4cc2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c3b4cc2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=7420 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c3b4cc2ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=608 identity=7420 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c3b4cc2ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=608 identity=7420 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c3b4cc2ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=608 identity=7420 ipv4=10.0.0.27 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vpcgd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7118bef596 endpointID=292 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-frqth subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=7118bef596 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=292 identity=13101 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-frqth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 cf68ba94-03e7-4637-8107-863aaa7895e9 default }" containerID=40ebf70c3c9fb7145752fe0e9a42cc71d93cb111333e10da0aea9b5d347ac76d datapathConfiguration="&{false false false false false }" interface=lxcef0308ab450e k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40ebf70c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40ebf70c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40ebf70c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=29816 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40ebf70c3c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=690 identity=29816 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 9ee46260-07a9-4a52-9207-b98f990d2428 default }" containerID=4418bf65233785e14a6eec5b296f825cb79913b3e3e4dafbeda9deee59d1b2e7 datapathConfiguration="&{false false false false false }" interface=lxcf4bec99fbd1c k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4418bf6523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4418bf6523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4418bf6523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=34834 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4418bf6523 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1268 identity=34834 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 1dcef93d-8243-4bad-b7dd-97f3474d5661 default }" containerID=aaee7ec46416800dd95b6fdafa80d8641c7d464d5a1e382cf6b6d169d362f69d datapathConfiguration="&{false false false false false }" interface=lxc01ad677edb48 k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aaee7ec464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aaee7ec464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aaee7ec464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=10666 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aaee7ec464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=648 identity=10666 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40ebf70c3c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=690 identity=29816 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc subsys=endpoint level=info msg="Successful endpoint creation" containerID=40ebf70c3c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=690 identity=29816 ipv4=10.0.0.142 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-5dztc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4418bf6523 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1268 identity=34834 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4418bf6523 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1268 identity=34834 ipv4=10.0.0.245 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-cxg28 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=aaee7ec464 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=648 identity=10666 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx subsys=endpoint level=info msg="Successful endpoint creation" containerID=aaee7ec464 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=648 identity=10666 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-nxphx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 1ed64c82-af8a-4e40-8cfd-c3c114686608 default }" containerID=e8f975da59740c2e00f01db918d05e2abdaf6a4dfbb4c7025ec40ec6d8c2ad7a datapathConfiguration="&{false false false false false }" interface=lxcef118be30117 k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8f975da59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8f975da59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8f975da59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=45734 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8f975da59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3438 identity=45734 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8f975da59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3438 identity=45734 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8f975da59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3438 identity=45734 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8f975da59 endpointID=3438 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-nld84 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=19e8f6e4-bc7e-43ca-a3fb-8dc9349f4afb k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e8f975da59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3438 identity=45734 ipv4=10.0.0.172 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-nld84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 db701a53-ef4b-4e44-83a1-4be74a0f7a37 default }" containerID=032daa8f2a8dc3a3a00004e4a4ebfad8abd133cd3d706f7df5a19ac286eb74c8 datapathConfiguration="&{false false false false false }" interface=lxc9f15a4cd5082 k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=032daa8f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=032daa8f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=032daa8f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identity=13465 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=032daa8f2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2774 identity=13465 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=032daa8f2a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2774 identity=13465 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=032daa8f2a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2774 identity=13465 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=032daa8f2a endpointID=2774 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-jqm27 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8e58934b-5816-44f4-bcb6-47622619bc26 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=032daa8f2a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2774 identity=13465 ipv4=10.0.0.235 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-jqm27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 28dee893-c915-4dc2-b361-c070301a56d9 default }" containerID=ccec9a1bbe171db2c695784ebe14a514d729fc3037b7c0e1ff7ce9cd24fd4a3a datapathConfiguration="&{false false false false false }" interface=lxc99965ff54ad2 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccec9a1bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccec9a1bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccec9a1bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=41339 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccec9a1bbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=41339 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ccec9a1bbe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3740 identity=41339 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccec9a1bbe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3740 identity=41339 ipv4=10.0.0.30 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-kgfzr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.178 b5bb520a-493a-41ed-afe6-f97d01c29307 default }" containerID=b98f484e521e784de6818bd3290945054d5bc43f37c367dd471e1b87b58b79d5 datapathConfiguration="&{false false false false false }" interface=lxc08cb976a1a13 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b98f484e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b98f484e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d6397672-7fb3-4404-8132-94f79dd15651,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d6397672-7fb3-4404-8132-94f79dd15651,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=d6397672-7fb3-4404-8132-94f79dd15651;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=d6397672-7fb3-4404-8132-94f79dd15651;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b98f484e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=27089 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=d6397672-7fb3-4404-8132-94f79dd15651,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=d6397672-7fb3-4404-8132-94f79dd15651,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b98f484e52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4050 identity=27089 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b98f484e52 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4050 identity=27089 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b98f484e52 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4050 identity=27089 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b98f484e52 endpointID=4050 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-xgtmk subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=d6397672-7fb3-4404-8132-94f79dd15651 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=d6397672-7fb3-4404-8132-94f79dd15651 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=b98f484e52 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4050 identity=27089 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xgtmk subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=2e5c44f1-383a-4ca5-90c9-36ceeb708743] Description:}]" policyAddRequest=e70c3e57-21ae-46d0-bfc4-cd7bb895cbb2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e70c3e57-21ae-46d0-bfc4-cd7bb895cbb2 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7d4a0229-0574-4b4b-99bc-9ec25f9d9079] Description:}]" policyAddRequest=8d676af1-c463-4d7b-886a-b9455356e9b2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=8d676af1-c463-4d7b-886a-b9455356e9b2 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.167 e3605904-fecc-4215-9495-a9487d7092aa default }" containerID=9ca881f2eb5c5a8122e5773bbbb5d439bec95faf60741cead84e5c10f519c95b datapathConfiguration="&{false false false false false }" interface=lxc7382e3303bde k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ca881f2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ca881f2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ca881f2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=3005 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ca881f2eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=3005 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9ca881f2eb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=216 identity=3005 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ca881f2eb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=216 identity=3005 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-l9dnz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 3910a145-8f90-42cd-b0ba-a4cf69e9c9fc default }" containerID=5c87446335f72d1cdaff5d82c4189a8ff4d154751ce312870443a3e67822f0a1 datapathConfiguration="&{false false false false false }" interface=lxc520378403b52 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c87446335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c87446335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c87446335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=12983 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c87446335 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=457 identity=12983 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c87446335 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=457 identity=12983 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c87446335 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=457 identity=12983 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-ww84n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.66 5166ae24-23d2-4a77-be41-2b6b8af784b0 default }" containerID=48d5c3452c2d69428de15c51023751de3a06c7e789e3e9388f666885d3c04b20 datapathConfiguration="&{false false false false false }" interface=lxc614a4812f62e k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=3074 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=580 identity=3074 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48d5c3452c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=580 identity=3074 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h subsys=endpoint level=info msg="Successful endpoint creation" containerID=48d5c3452c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=580 identity=3074 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-fl62h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 bf84a252-2614-4db0-bcd9-b018da4cd5ed default }" containerID=1acc53183dd8d215203c768a220508cb70973c9201efbb2edf437ee93b0a4d90 datapathConfiguration="&{false false false false false }" interface=lxcb49c47391b2c k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1acc53183d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1acc53183d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1acc53183d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=3229 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1acc53183d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=778 identity=3229 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1acc53183d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=778 identity=3229 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1acc53183d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=778 identity=3229 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 c6a63918-426e-4618-94f5-aca44250a438 default }" containerID=cfc7987cecef694eb970057d591350d69c3adadc3677e98a496462f61ff082ed datapathConfiguration="&{false false false false false }" interface=lxc87b5248d214f k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfc7987cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfc7987cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfc7987cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfc7987cec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=58220 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfc7987cec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1252 identity=58220 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfc7987cec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1252 identity=58220 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cfc7987cec endpointID=1252 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cfc7987cec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1252 identity=58220 ipv4=10.0.0.135 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2d6c3a16-49de-4795-bf1d-8c240b70aef1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 4a28679e-785d-42b4-ac33-ace002419ea7 default }" containerID=fe6ed3db6abcd20856c66b55e2baf412de383306642c966dc5cb81d8cab394a4 datapathConfiguration="&{false false false false false }" interface=lxcc33ecd66f6a7 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe6ed3db6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe6ed3db6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe6ed3db6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=23468 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe6ed3db6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=23468 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe6ed3db6a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3883 identity=23468 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe6ed3db6a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3883 identity=23468 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d17f9308-122e-4326-be39-a32f4981ca00] Description:}]" policyAddRequest=5e448560-5572-4254-8dd6-9f28abbd6201 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5e448560-5572-4254-8dd6-9f28abbd6201 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.75 f85b39fd-e1cb-4b70-be80-5fa8773934a4 default }" containerID=32fc26ddc4af7dd75dfdbdd88b584f7b1c008b34a66f847f202b2705797ce90e datapathConfiguration="&{false false false false false }" interface=lxc00eb0134c14a k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32fc26ddc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32fc26ddc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32fc26ddc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32fc26ddc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=58220 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32fc26ddc4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=238 identity=58220 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=32fc26ddc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=58220 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=daemon level=info msg="Delete endpoint request" containerID=32fc26ddc4 endpointID=238 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=32fc26ddc4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=238 identity=58220 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f276f0a8-e333-4339-98a2-8d16b66f87f7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 fcbb3435-60cb-4132-85f0-60cfd684cab5 default }" containerID=906d2759c9c0714d1d4614de1c0145e5439cfc0a0be67f7a1d39478ec295eabb datapathConfiguration="&{false false false false false }" interface=lxc0e5c3e8f8575 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=906d2759c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=906d2759c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=906d2759c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=25023 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=906d2759c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=25023 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=906d2759c9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2065 identity=25023 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=906d2759c9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2065 identity=25023 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=0132cced-c6c8-40d2-9bce-c2f8c223e7a5] Description:}]" policyAddRequest=25e22b8c-0cec-404a-b43e-f6b81535661e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=25e22b8c-0cec-404a-b43e-f6b81535661e policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.48 d3ccde0a-a06e-4856-8ee5-87ed9eea6f92 default }" containerID=f053b8a01e8e832628b3e85fae9063da43792efe6db296cc97a131978fc14890 datapathConfiguration="&{false false false false false }" interface=lxcbd9ff12561df k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f053b8a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f053b8a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f053b8a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identity=10646 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f053b8a01e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identity=10646 ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f053b8a01e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2166 identity=10646 ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f053b8a01e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2166 identity=10646 ipv4=10.0.0.48 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008264909978762834 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.31 78e92fe5-75d3-4fa7-a862-a275303ea757 default }" containerID=478434dd52441d456ba3528ae2d351c71a9fe82a67c1613be0a1d3768d578ac2 datapathConfiguration="&{false false false false false }" interface=lxcbc3846749e87 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=478434dd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=478434dd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=478434dd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=3480 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=478434dd52 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=994 identity=3480 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=478434dd52 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=994 identity=3480 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=478434dd52 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=994 identity=3480 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5jzvk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.216 1eff2fe5-b6cb-453b-b982-12c83d13b65c default }" containerID=44877d39855c4633f9a787f8e3ca124ba17809c0cc937f3ab383fb8f8e8a7f30 datapathConfiguration="&{false false false false false }" interface=lxc0ef57d8740c3 k8sPodName=monitoring/node-feature-discovery-worker-fp75w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44877d3985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 c5462ab6-bb05-4747-8142-c46b52176fed default }" containerID=23ce34132afad5c2bc8fc99a798cfcc336b2fb4cfefe1447140fd90c566b8663 datapathConfiguration="&{false false false false false }" interface=lxc615378e9033d k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23ce34132a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44877d3985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=23ce34132a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44877d3985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=58868 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=44877d3985 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1462 identity=58868 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23ce34132a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=43741 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23ce34132a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=43741 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44877d3985 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1462 identity=58868 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w subsys=endpoint level=info msg="Successful endpoint creation" containerID=44877d3985 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1462 identity=58868 ipv4=10.0.0.216 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fp75w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23ce34132a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=714 identity=43741 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23ce34132a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=714 identity=43741 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-zjb52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.155 0a4acad5-cad4-4a99-a02b-c79a79176a94 default }" containerID=71899278173945a8fe52c2d4f5035e08bfa35467f8f308f937ba260ce6a9aa06 datapathConfiguration="&{false false false false false }" interface=lxcbde0a7642281 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7189927817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7189927817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7189927817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=20844 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7189927817 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=20844 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7189927817 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=20844 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=7189927817 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=20844 ipv4=10.0.0.155 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-knmnl subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00349 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00349 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00349:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=349 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 cdcdc944-80da-454d-8ea7-26b5afbc7ca1 default }" containerID=d58401fcd55ce56fb31fc695c012c4e5d42c92cbb4a410f85ac1cabc93150c3e datapathConfiguration="&{false false false false false }" interface=lxcf3fa0861e6ee k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d58401fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d58401fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bece1de6-5367-46a6-8436-0efff85fb918,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bece1de6-5367-46a6-8436-0efff85fb918,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=bece1de6-5367-46a6-8436-0efff85fb918;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=bece1de6-5367-46a6-8436-0efff85fb918;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d58401fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=44302 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=bece1de6-5367-46a6-8436-0efff85fb918,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=bece1de6-5367-46a6-8436-0efff85fb918,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d58401fcd5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=44302 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d58401fcd5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=140 identity=44302 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=d58401fcd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=44302 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d58401fcd5 endpointID=140 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-4sh2w subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=bece1de6-5367-46a6-8436-0efff85fb918 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=bece1de6-5367-46a6-8436-0efff85fb918 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=d58401fcd5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=44302 ipv4=10.0.0.61 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-4sh2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 888094fc-712b-4308-a270-49c719c54f5e default }" containerID=fe2e1e0c2376e98bced34e9dc251c361cb326c95687ece6c014d05264afc1b2c datapathConfiguration="&{false false false false false }" interface=lxcdec0e629c19e k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=32728 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=32728 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 1ce731bf-b593-44b6-aa96-1f6b8a457ad1 default }" containerID=c92b6b999278db309fffc7c1d1e190c4882d65a959bb7318945edee2ded7bce3 datapathConfiguration="&{false false false false false }" interface=lxcebdd6a6f0a67 k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c92b6b9992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 19bb35d8-0e22-43a0-abd0-fff9dd94f7b7 default }" containerID=ae69547577a47631b8e2ee2f470bd8dd314c617320ff428fed9c0c31182761f5 datapathConfiguration="&{false false false false false }" interface=lxccef93490b517 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae69547577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c92b6b9992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=ae69547577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c92b6b9992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=4963 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c92b6b9992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=831 identity=4963 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae69547577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=14201 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae69547577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3715 identity=14201 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe2e1e0c23 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3358 identity=32728 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe2e1e0c23 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3358 identity=32728 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-256sb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c92b6b9992 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=831 identity=4963 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c92b6b9992 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=831 identity=4963 ipv4=10.0.0.232 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-559dc6f4b6-v7wtg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ae69547577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3715 identity=14201 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae69547577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3715 identity=14201 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-26xct subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 8c6b5d15-bb3e-462a-b40f-14a7eb1a6a2f default }" containerID=04c80bc11ed35ba2c62dace5007b2c689946533a390712dd0abe77042b85e11b datapathConfiguration="&{false false false false false }" interface=lxcb3de710b1819 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04c80bc11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04c80bc11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04c80bc11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=899 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04c80bc11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=899 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04c80bc11e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=230 identity=899 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=04c80bc11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=899 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.140 f4d73e71-11c6-48c5-87dc-11c934f269bf default }" containerID=ed2e80b2b57d5629186f814d3a26132bae57bc86a7493990dbdf033be1b7f9a2 datapathConfiguration="&{false false false false false }" interface=lxcaf718263936c k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed2e80b2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed2e80b2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed2e80b2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed2e80b2b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=58220 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed2e80b2b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=58220 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed2e80b2b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=58220 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 32fc161e-39ab-4295-94fb-44a24b177b5c default }" containerID=d265f2a9c79df8219a74d8689d8d338221d1a6a980d9a1ae299ed1d39248cbdb datapathConfiguration="&{false false false false false }" interface=lxca5ceb0e690cc k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d265f2a9c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d265f2a9c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d265f2a9c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d265f2a9c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=519 identity=58220 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d265f2a9c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=519 identity=58220 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d265f2a9c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=58220 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=daemon level=info msg="Delete endpoint request" containerID=04c80bc11e endpointID=230 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-gcvfn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d7b92244-7982-4fc2-885e-926b00c8a124 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=04c80bc11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=230 identity=899 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gcvfn subsys=endpoint level=info msg="Delete endpoint request" containerID=ed2e80b2b5 endpointID=341 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ed2e80b2b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=58220 ipv4=10.0.0.140 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-955d6018-e29b-4e8a-b3e4-b6db52e50f1a subsys=endpoint level=info msg="Delete endpoint request" containerID=d265f2a9c7 endpointID=519 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d265f2a9c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=519 identity=58220 ipv4=10.0.0.252 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10d21a8e-7d8e-47a3-9cb7-88c362eea731 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 2fffa604-93b0-473d-a5b2-c35ce93e750c default }" containerID=98a78a039473ff053b8b45d5e5f1bef39071a2bac79c5bfff8717b36ad02524f datapathConfiguration="&{false false false false false }" interface=lxc7309512b36ed k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98a78a0394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98a78a0394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98a78a0394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=34886 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=98a78a0394 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3343 identity=34886 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 c6ff112e-1eca-40f2-95a2-0c4945d2d12e default }" containerID=47289ac958b29b4155a525d7a5561bf35044eefab395e54203769ac9770f26b8 datapathConfiguration="&{false false false false false }" interface=lxc97c41f3408b5 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47289ac958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47289ac958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47289ac958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=2011 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47289ac958 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=2011 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98a78a0394 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3343 identity=34886 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98a78a0394 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3343 identity=34886 ipv4=10.0.0.156 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=47289ac958 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=650 identity=2011 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47289ac958 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=2011 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 b033dc91-f719-49a1-919e-ebd6135aa14b default }" containerID=9f26d2c7207ced1f2847d8dc568cd114b402be567be37bc2109c55924ade90d7 datapathConfiguration="&{false false false false false }" interface=lxc32eef58294ae k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f26d2c720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f26d2c720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f26d2c720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=7860 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f26d2c720 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3399 identity=7860 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 9e0591af-03bc-498a-8dd8-0187c3289077 default }" containerID=302d4375ee92b058f0aa2e84de14767673975456e036a06d39f0068b6101bbf5 datapathConfiguration="&{false false false false false }" interface=lxcd188bd0ccedd k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.41 12c8753f-b4bb-4d1a-9093-a5758c44ad53 default }" containerID=97fe6fbc07f78c8a7e83e765dd2e6ec9a9aca50aeeccaa0743c0ae01a7419849 datapathConfiguration="&{false false false false false }" interface=lxc7f676f83e2b1 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=302d4375ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=97fe6fbc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=302d4375ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=97fe6fbc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=302d4375ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=38728 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=302d4375ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2021 identity=38728 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=97fe6fbc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=9313 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=97fe6fbc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=9313 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f26d2c720 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3399 identity=7860 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f26d2c720 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3399 identity=7860 ipv4=10.0.0.51 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-fcqd8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=302d4375ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2021 identity=38728 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=302d4375ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2021 identity=38728 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=97fe6fbc07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=9313 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=97fe6fbc07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=9313 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.42 d3294d2d-7d76-4ba7-a210-cacbfb1d0dca default }" containerID=30b04765edcd057d5b45a3be29c9997c762522383403d855fb1b664d4cd8260c datapathConfiguration="&{false false false false false }" interface=lxcaa96b89438e5 k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30b04765ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30b04765ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30b04765ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30b04765ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=58220 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30b04765ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=58220 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=endpoint level=info msg="Successful endpoint creation" containerID=30b04765ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=58220 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.157 132cd936-116e-40a3-ba18-6e0aee18e779 default }" containerID=238a175fe43b76d19e44ee6e5a4afe251745cc4514954a277928ccc4d4c3d3e1 datapathConfiguration="&{false false false false false }" interface=lxcb2c865966d03 k8sPodName=monitoring/vector-k7m4r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=238a175fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=238a175fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=238a175fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=14309 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=238a175fe4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=475 identity=14309 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=238a175fe4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=475 identity=14309 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r subsys=endpoint level=info msg="Successful endpoint creation" containerID=238a175fe4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=475 identity=14309 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/vector-k7m4r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30b04765ed endpointID=110 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=30b04765ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=58220 ipv4=10.0.0.42 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7dbbe41b-d495-40f7-b1dc-3e351ba92108 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 daa10331-45e1-465c-8fc3-becd1f51c22e default }" containerID=61e273ccd75d91d6da6adb88d8ec85205693816bacd3e215546afbaab30e8ef0 datapathConfiguration="&{false false false false false }" interface=lxc9a594817c007 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61e273ccd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61e273ccd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=61e273ccd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=6148 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61e273ccd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=418 identity=6148 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=61e273ccd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=418 identity=6148 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws subsys=endpoint level=info msg="Successful endpoint creation" containerID=61e273ccd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=418 identity=6148 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-n6gws subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 7b43c814-214b-4314-b840-ae0b62df2b60 default }" containerID=2dc7fa8587599231e7d364a020cbc6e82ce39df253d0f564a16ccfd1e312b4eb datapathConfiguration="&{false false false false false }" interface=lxc7787a9b69ff4 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2dc7fa8587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2dc7fa8587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2dc7fa8587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=47103 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2dc7fa8587 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=47103 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2dc7fa8587 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=47103 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2dc7fa8587 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=47103 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 b40c8ea8-ede8-44a1-8349-2287850b5437 default }" containerID=24efc93ccb5a42660f14797d4203501b68c672c7825dc4d245d0e0a1678c5c03 datapathConfiguration="&{false false false false false }" interface=lxc3989d70f2454 k8sPodName=openstack/memcached-memcached-6479589586-jbpmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=23566 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3047 identity=23566 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24efc93ccb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3047 identity=23566 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=24efc93ccb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3047 identity=23566 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-jbpmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.38 2eb1e630-b354-44bc-99b6-df3190ed9001 default }" containerID=9a88bcd57a968b4c6874aee36c2224bcca9a1f9f815bc82381ef1ff52cc17062 datapathConfiguration="&{false false false false false }" interface=lxc49ddcf7b625e k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a88bcd57a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a88bcd57a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a88bcd57a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a88bcd57a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=58220 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a88bcd57a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=237 identity=58220 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a88bcd57a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=58220 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=daemon level=info msg="Delete endpoint request" containerID=9a88bcd57a endpointID=237 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9a88bcd57a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=237 identity=58220 ipv4=10.0.0.38 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d4317d3e-4862-42b4-85d4-01675e3272b0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 825d519a-4e12-4b30-942f-d6fae521d289 default }" containerID=81d8fa66cc726a6c6686beb5d1316016e905791d9f850412b9e81a0002ac8060 datapathConfiguration="&{false false false false false }" interface=lxc4df749b9c289 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d8fa66cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d8fa66cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d8fa66cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=30731 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d8fa66cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=30731 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=81d8fa66cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=158 identity=30731 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d8fa66cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=30731 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.115 4ad58ba5-2cbc-41d9-87e6-d99e5f8a760d default }" containerID=99293f537d056ad474bbd64bfe5fce68b080a92d6ca2db6fb358eeecc2d310be datapathConfiguration="&{false false false false false }" interface=lxc0a7457be5365 k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99293f537d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99293f537d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99293f537d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identity=330 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99293f537d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1712 identity=330 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 aece22fe-5197-4c51-957d-b38191a131fd default }" containerID=87178b3410da72be4255dfd95ddd16b22d11ed9b0f35be9e84a7d430138e4b2e datapathConfiguration="&{false false false false false }" interface=lxc461a08a9fde1 k8sPodName=openstack/keystone-credential-setup-4nvtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87178b3410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87178b3410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=879df37d-1886-4c5d-98f5-282778b390ce,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=879df37d-1886-4c5d-98f5-282778b390ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=879df37d-1886-4c5d-98f5-282778b390ce;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=879df37d-1886-4c5d-98f5-282778b390ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87178b3410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=29896 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=879df37d-1886-4c5d-98f5-282778b390ce,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=879df37d-1886-4c5d-98f5-282778b390ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87178b3410 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2641 identity=29896 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99293f537d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1712 identity=330 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=99293f537d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1712 identity=330 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-api-57bdd8c4f-9x6x8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=87178b3410 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2641 identity=29896 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=87178b3410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=29896 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=87178b3410 endpointID=2641 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4nvtc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=879df37d-1886-4c5d-98f5-282778b390ce k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=879df37d-1886-4c5d-98f5-282778b390ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=87178b3410 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2641 identity=29896 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-credential-setup-4nvtc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 18e50032-a782-44e4-9c32-55fbee590f6c default }" containerID=d3794497beb511620d59194131fb6a007eb65b867af9b9530b5db2033e7467d8 datapathConfiguration="&{false false false false false }" interface=lxc4e0da9a0884f k8sPodName=openstack/keystone-db-init-cgjtc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3794497be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3794497be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=37618e68-df59-414f-91da-0db3f3ab9667,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=37618e68-df59-414f-91da-0db3f3ab9667,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=37618e68-df59-414f-91da-0db3f3ab9667;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=37618e68-df59-414f-91da-0db3f3ab9667;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3794497be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identity=8483 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=37618e68-df59-414f-91da-0db3f3ab9667,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=37618e68-df59-414f-91da-0db3f3ab9667,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3794497be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2771 identity=8483 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d3794497be datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2771 identity=8483 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3794497be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2771 identity=8483 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3794497be endpointID=2771 k8sNamespace=openstack k8sPodName=keystone-db-init-cgjtc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=37618e68-df59-414f-91da-0db3f3ab9667 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=37618e68-df59-414f-91da-0db3f3ab9667 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d3794497be datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2771 identity=8483 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-db-init-cgjtc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 c83a8ce9-6581-479e-8a67-3ff4560bab45 default }" containerID=71ee0e3574748bd80b9083bd65854ca8b60080f00560aff5a50de4f9cd6a5763 datapathConfiguration="&{false false false false false }" interface=lxc524907242e6b k8sPodName=openstack/keystone-fernet-setup-55dzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=43373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=43373 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71ee0e3574 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=43373 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=71ee0e3574 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=43373 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=71ee0e3574 endpointID=471 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-55dzh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=1f58b3c1-0a29-43b3-9def-0bfa402c914e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=71ee0e3574 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=43373 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-55dzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 cd97a9ae-5f75-4875-905c-e5f6af3c4b12 default }" containerID=f2649af90329412c9bf24d5048276d7b634a503a059d46396eb90b02d1a6f06e datapathConfiguration="&{false false false false false }" interface=lxc7e0bac232132 k8sPodName=openstack/keystone-db-sync-7pfbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=4287 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=20 identity=4287 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f2649af903 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=20 identity=4287 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f2649af903 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=4287 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f2649af903 endpointID=20 k8sNamespace=openstack k8sPodName=keystone-db-sync-7pfbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=2f771eb7-02e4-4111-91e6-33a11b013881 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f2649af903 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=20 identity=4287 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/keystone-db-sync-7pfbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 997e7dd6-971d-49b6-a790-9d6708015002 default }" containerID=e2dcced8c190f45c6e57df448ad8cd89e765dc89b3920f3c83bba437a4cd30f1 datapathConfiguration="&{false false false false false }" interface=lxc33e9ba50cd7d k8sPodName=openstack/keystone-rabbit-init-lwsxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identity=47604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=489 identity=47604 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2dcced8c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=489 identity=47604 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2dcced8c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=489 identity=47604 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2dcced8c1 endpointID=489 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-lwsxd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=67c3ae85-58de-4a31-aefc-9575c0e0038d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e2dcced8c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=489 identity=47604 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-rabbit-init-lwsxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 5995436b-d0e4-45d1-b5b5-df35af6e2cd3 default }" containerID=3822f0500fbffabd76de8da29b19a19276796b0ecc747b62f20c7b08e0d648c4 datapathConfiguration="&{false false false false false }" interface=lxcebf267307d5a k8sPodName=openstack/keystone-domain-manage-h8lk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=6997 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=886 identity=6997 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3822f0500f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=886 identity=6997 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3822f0500f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=6997 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3822f0500f endpointID=886 k8sNamespace=openstack k8sPodName=keystone-domain-manage-h8lk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b7b7ccf0-e164-43b1-9499-9ede2c8565b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3822f0500f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=886 identity=6997 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-domain-manage-h8lk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 e22136bb-1ceb-4daa-9a39-5b4fcb878a15 default }" containerID=49f2fe17d15703c899f373b795cbd1f30cbcb8e94eac56fb0bca4ae1d58a50e7 datapathConfiguration="&{false false false false false }" interface=lxcf2a4f56814cc k8sPodName=openstack/keystone-bootstrap-75btn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49f2fe17d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49f2fe17d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=044db497-c68c-40ac-8a8e-76a94e679995,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=044db497-c68c-40ac-8a8e-76a94e679995,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=044db497-c68c-40ac-8a8e-76a94e679995;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=044db497-c68c-40ac-8a8e-76a94e679995;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49f2fe17d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=53816 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=044db497-c68c-40ac-8a8e-76a94e679995,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=044db497-c68c-40ac-8a8e-76a94e679995,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49f2fe17d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=958 identity=53816 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49f2fe17d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=958 identity=53816 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=endpoint level=info msg="Successful endpoint creation" containerID=49f2fe17d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=53816 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=49f2fe17d1 endpointID=958 k8sNamespace=openstack k8sPodName=keystone-bootstrap-75btn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=044db497-c68c-40ac-8a8e-76a94e679995 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=044db497-c68c-40ac-8a8e-76a94e679995 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=49f2fe17d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=958 identity=53816 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/keystone-bootstrap-75btn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 2662458f-6e82-4cf2-974c-9085dc1ad1cd default }" containerID=f29839aab42bf8fb0ed34635a8f26e3582c823639e0cb8ca00ad3bccbf970940 datapathConfiguration="&{false false false false false }" interface=lxcdc2bc6c12032 k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f29839aab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f29839aab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f29839aab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f29839aab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=58220 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f29839aab4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=575 identity=58220 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f29839aab4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=58220 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=daemon level=info msg="Delete endpoint request" containerID=f29839aab4 endpointID=575 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f29839aab4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=58220 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b4b526c-794e-4e2f-bb34-2ba9159c78e5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 c74b4881-6dce-49c5-834d-6b696e259dd9 default }" containerID=eb5a4ee9dd6b70cb9fe8f19ec15e38c213c178a7f8211026e1a2df938df6f9c9 datapathConfiguration="&{false false false false false }" interface=lxc3fc692ccd61a k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb5a4ee9dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb5a4ee9dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=eb5a4ee9dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=43203 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb5a4ee9dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2121 identity=43203 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb5a4ee9dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2121 identity=43203 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb5a4ee9dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2121 identity=43203 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03525099084231742 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.149 b86e13b2-b6ce-4eaf-b8b4-c1503892512e default }" containerID=b92b7b0599e4ce1c40e3aa398ff6b2af7666712fe744364edf7eb19df2f04a56 datapathConfiguration="&{false false false false false }" interface=lxc5b7f356a0fe9 k8sPodName=openstack/barbican-api-74986b78cc-rj7gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=14164 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=100 identity=14164 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b92b7b0599 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=100 identity=14164 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b92b7b0599 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=100 identity=14164 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/barbican-api-74986b78cc-rj7gn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 3036666b-0f35-4d82-bd94-5347c97ab429 default }" containerID=c3a9f6e3a6a2fad38cba045dd2f893ea02f2ab23780376f470dbda8bbd2093f1 datapathConfiguration="&{false false false false false }" interface=lxce7b70a753ba9 k8sPodName=openstack/barbican-db-init-fdnpk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3a9f6e3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3a9f6e3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3a9f6e3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=20901 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3a9f6e3a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=20901 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3a9f6e3a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=20901 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3a9f6e3a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=20901 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3a9f6e3a6 endpointID=277 k8sNamespace=openstack k8sPodName=barbican-db-init-fdnpk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e52b51a5-097b-4d8f-81b6-108ece100fcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3a9f6e3a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=20901 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/barbican-db-init-fdnpk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 75646b35-5b90-42d5-999f-c13b977e6b3a default }" containerID=9d5f8c123ad8ad134a53f144797b9df51cdc254edba42e919c81559354ff3f7d datapathConfiguration="&{false false false false false }" interface=lxc134c30e39d73 k8sPodName=openstack/barbican-db-sync-cp27t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d5f8c123a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d5f8c123a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d5f8c123a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=6800 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d5f8c123a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=845 identity=6800 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d5f8c123a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=845 identity=6800 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d5f8c123a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=6800 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=daemon level=info msg="Delete endpoint request" containerID=9d5f8c123a endpointID=845 k8sNamespace=openstack k8sPodName=barbican-db-sync-cp27t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=cc57bc01-3436-4b4c-9e10-f1a2d0e5cbe1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=9d5f8c123a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=845 identity=6800 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-sync-cp27t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 ae26cb73-9c10-455d-89c0-722e6d4a6f40 default }" containerID=b888dfc5d303896fdfccf9ab0d2c6e9cc84e455bf5067641292dc3e688f949b6 datapathConfiguration="&{false false false false false }" interface=lxc06d9d7bdeb86 k8sPodName=openstack/barbican-rabbit-init-ct5m7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b888dfc5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b888dfc5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b888dfc5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=22612 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b888dfc5d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1883 identity=22612 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b888dfc5d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1883 identity=22612 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b888dfc5d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=22612 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b888dfc5d3 endpointID=1883 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ct5m7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=86cac517-584a-4ec0-b50e-11af7e6e2fc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b888dfc5d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1883 identity=22612 ipv4=10.0.0.178 ipv6= k8sPodName=openstack/barbican-rabbit-init-ct5m7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 bbfeda61-f705-40bc-9eaa-283cc244f4c9 default }" containerID=28d43ca1dfd648310fa4517f237633cbcbc82931baeb425bde65d08f92b9c52e datapathConfiguration="&{false false false false false }" interface=lxcf444e30d4b91 k8sPodName=openstack/barbican-ks-service-8hjxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28d43ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28d43ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28d43ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=44893 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28d43ca1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=44893 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28d43ca1df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=90 identity=44893 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=28d43ca1df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=44893 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28d43ca1df endpointID=90 k8sNamespace=openstack k8sPodName=barbican-ks-service-8hjxm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=24d20ec4-2790-4e51-8ad5-15ff92e5009a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=28d43ca1df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=44893 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-ks-service-8hjxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 4f305ddf-aba1-4f1e-9405-6e007889ad56 default }" containerID=92f2fc5833975c843b505e62240cd384e842a4b447643518892ed9a9c0202c6c datapathConfiguration="&{false false false false false }" interface=lxc0e7bd1c9f809 k8sPodName=openstack/barbican-ks-endpoints-fdjdw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92f2fc5833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92f2fc5833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92f2fc5833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=11785 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92f2fc5833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2359 identity=11785 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92f2fc5833 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2359 identity=11785 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=endpoint level=info msg="Successful endpoint creation" containerID=92f2fc5833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=11785 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=92f2fc5833 endpointID=2359 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-fdjdw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=416f22ca-2b09-45c7-85fc-98cd6cec6997 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=92f2fc5833 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2359 identity=11785 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-ks-endpoints-fdjdw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 539740dc-8402-4b7b-94a6-4abdf4292dc2 default }" containerID=a68ded85a156a5ccc223797e9674e416571d8bf5ad29070f829246829406c927 datapathConfiguration="&{false false false false false }" interface=lxcd263d36e1596 k8sPodName=openstack/barbican-ks-user-ggpzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a68ded85a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a68ded85a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a68ded85a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=1793 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a68ded85a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=1793 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a68ded85a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=812 identity=1793 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a68ded85a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=1793 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a68ded85a1 endpointID=812 k8sNamespace=openstack k8sPodName=barbican-ks-user-ggpzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=1e72db26-d53d-425e-82ad-9157d83a44c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a68ded85a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=812 identity=1793 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/barbican-ks-user-ggpzn subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.16 c2dce3df-cec8-487c-b9e7-e8b228677596 default }" containerID=d28b6dde7e14ba867a4fdeaef5ad22d23249c14ce2c78444049d8fc7d17a82c0 datapathConfiguration="&{false false false false false }" interface=lxcd629946cddaa k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d28b6dde7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d28b6dde7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d28b6dde7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identity=4214 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d28b6dde7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identity=4214 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d28b6dde7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1266 identity=4214 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d28b6dde7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1266 identity=4214 ipv4=10.0.0.16 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-tgbbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 a6455109-df2b-42b9-8859-0df793b69a18 default }" containerID=c23c1fefc2ed51c86bb1ca1f6d3ee934c317ce954c6b15ea32698f5e805a8d62 datapathConfiguration="&{false false false false false }" interface=lxc3ae11dd557aa k8sPodName=openstack/rook-ceph-detect-version-jjpft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=15186 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1089 identity=15186 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c23c1fefc2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1089 identity=15186 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=endpoint level=info msg="Successful endpoint creation" containerID=c23c1fefc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1089 identity=15186 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c23c1fefc2 endpointID=1089 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jjpft subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=8f07dcd5-7fe8-4c28-bc9d-25d674c4fe54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=c23c1fefc2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1089 identity=15186 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jjpft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 2da30213-8027-48bf-891e-e2c0c0ac9305 default }" containerID=3bf651c29e435ee44e2d73d882c601e74a31b8fae0de2deb3579071c8c86e9e4 datapathConfiguration="&{false false false false false }" interface=lxc41cac3d8bed7 k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bf651c29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bf651c29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bf651c29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=55727 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bf651c29e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=55727 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bf651c29e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=76 identity=55727 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bf651c29e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=76 identity=55727 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bf651c29e endpointID=76 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mgvrx subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=48f82621-48e5-4f57-b280-8e788ea08db3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=3bf651c29e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=76 identity=55727 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mgvrx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 86f727de-6555-4938-a6a2-95e5f46924e8 default }" containerID=f966fd7b36baa13aede0a4e93032f320749947fefab6d5e710b6dfc2836c27c4 datapathConfiguration="&{false false false false false }" interface=lxcf88b036b80c8 k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f966fd7b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f966fd7b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f966fd7b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=58220 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f966fd7b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=386 identity=58220 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f966fd7b36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=386 identity=58220 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f966fd7b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=58220 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=daemon level=info msg="Delete endpoint request" containerID=f966fd7b36 endpointID=386 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f966fd7b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=386 identity=58220 ipv4=10.0.0.68 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-498c803c-f3c2-4da4-9b8b-0a6b2cc26e95 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 4efb317f-8293-4c79-a06b-a351f430ddf4 default }" containerID=a0d3f4b6e1ddc2ae6a7eae3f345b47d9a2d33c69f14cbdffdd8ca45f06847d3a datapathConfiguration="&{false false false false false }" interface=lxc828d9b74b0c4 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0d3f4b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0d3f4b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0d3f4b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=60949 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0d3f4b6e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=60949 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a0d3f4b6e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2403 identity=60949 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0d3f4b6e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2403 identity=60949 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 00b05a78-4118-4822-9436-d0ac5a90c020 default }" containerID=e9f466239beae137feb4b099c7fdb48a085f5c1842e160186f99aac2d8853454 datapathConfiguration="&{false false false false false }" interface=lxcc712abf3c7dc k8sPodName=openstack/glance-db-init-7tvw4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e9f466239b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e9f466239b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e9f466239b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=4671 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e9f466239b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=4671 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e9f466239b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1016 identity=4671 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e9f466239b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1016 identity=4671 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e9f466239b endpointID=1016 k8sNamespace=openstack k8sPodName=glance-db-init-7tvw4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=777c7911-6d7b-4a2f-8016-9d5b777d5ed5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e9f466239b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1016 identity=4671 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/glance-db-init-7tvw4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 5af0c3be-3158-4f8c-a8f5-5626d8c36d7f default }" containerID=731206f96a1db675f145a7ea74cdc945ec03b794f9d2c8100e803ce6e596368b datapathConfiguration="&{false false false false false }" interface=lxc13d6d33531eb k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=731206f96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=731206f96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=731206f96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=29194 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=731206f96a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=557 identity=29194 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 0388e200-c604-46a0-8ba2-1f86f57eb422 default }" containerID=a3f1121284f381c24207c87a715e8398cd8d0e1c6092bba1b42fcff80bec4646 datapathConfiguration="&{false false false false false }" interface=lxc07c015d8702e k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3f1121284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3f1121284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3f1121284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=18713 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3f1121284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3397 identity=18713 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=731206f96a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=557 identity=29194 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=731206f96a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=557 identity=29194 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-stk5c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a3f1121284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3397 identity=18713 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3f1121284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3397 identity=18713 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-kskr2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 9b60ca27-9011-4967-84ef-43d755a22804 default }" containerID=34864d179f879b32830b9119ae701cb83496bbc6052fef504663454765446a44 datapathConfiguration="&{false false false false false }" interface=lxcd9c5a73b0073 k8sPodName=openstack/glance-db-sync-zhvlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34864d179f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3811 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34864d179f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3811 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34864d179f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3811 identity=38818 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34864d179f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3811 identity=38818 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34864d179f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3811 identity=38818 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=34864d179f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3811 identity=38818 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34864d179f endpointID=3811 k8sNamespace=openstack k8sPodName=glance-db-sync-zhvlp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=0a37407a-f6d7-4226-b696-167c32f765a8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=34864d179f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3811 identity=38818 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-db-sync-zhvlp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 51ab0b37-5dc8-46eb-9509-9ba4825b32f2 default }" containerID=ccaf57c16958ff0a4035b911e98a93bbac2ede7261d5a9b33c0a512f3f13180f datapathConfiguration="&{false false false false false }" interface=lxc4e4253e95183 k8sPodName=openstack/glance-rabbit-init-7wlfn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccaf57c169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccaf57c169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccaf57c169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=28760 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ccaf57c169 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=164 identity=28760 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccaf57c169 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=164 identity=28760 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccaf57c169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=28760 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccaf57c169 endpointID=164 k8sNamespace=openstack k8sPodName=glance-rabbit-init-7wlfn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d0486078-f51a-4226-bd4b-490dc183f9da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ccaf57c169 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=164 identity=28760 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/glance-rabbit-init-7wlfn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 63bcf409-c998-485d-bb78-c3651ed60c59 default }" containerID=eebfee05272eb1883b7b2ada5ed84d423f995a7b3eda0233b64b4ab1e7bc1d79 datapathConfiguration="&{false false false false false }" interface=lxc2192e944d958 k8sPodName=openstack/glance-ks-service-twrfm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=15187 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2254 identity=15187 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eebfee0527 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2254 identity=15187 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=endpoint level=info msg="Successful endpoint creation" containerID=eebfee0527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=15187 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eebfee0527 endpointID=2254 k8sNamespace=openstack k8sPodName=glance-ks-service-twrfm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=387f62e7-a227-4bad-9194-47b9cf6ad360 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eebfee0527 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2254 identity=15187 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/glance-ks-service-twrfm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 b3c121f4-f890-4803-9f50-bf90eb03bdf2 default }" containerID=194727db10be866d85e05d9628c62bcda738e42ba821ada4c767b0197acd9dbd datapathConfiguration="&{false false false false false }" interface=lxcd4b207730a3b k8sPodName=openstack/glance-ks-endpoints-2pmzc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=194727db10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=194727db10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=194727db10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=1671 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=194727db10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=1671 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=194727db10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2906 identity=1671 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=endpoint level=info msg="Successful endpoint creation" containerID=194727db10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2906 identity=1671 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=194727db10 endpointID=2906 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-2pmzc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a473d9b1-650b-4302-a469-bd2fd72d6cb4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=194727db10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2906 identity=1671 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-ks-endpoints-2pmzc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 2ab7b8ea-1c1f-4c22-957a-0364d8afa63b default }" containerID=3e49eef961909b3770e815576bcc94f135aa6e91a9f86b5368f55ace01705488 datapathConfiguration="&{false false false false false }" interface=lxcbffb259adb0d k8sPodName=openstack/glance-ks-user-g2dm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=37279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1111 identity=37279 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e49eef961 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1111 identity=37279 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e49eef961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=37279 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e49eef961 endpointID=1111 k8sNamespace=openstack k8sPodName=glance-ks-user-g2dm8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=3f22d5df-49f5-46f7-a005-b0e6e76433b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e49eef961 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1111 identity=37279 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-ks-user-g2dm8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 d9bb02e8-a60e-497e-9c09-b0811ddf29a2 default }" containerID=e63083610736cdba438245b509cb553498105b50948b7f82866d23d8b4a7035a datapathConfiguration="&{false false false false false }" interface=lxc3ebe49d6eecd k8sPodName=openstack/glance-metadefs-load-nzs5v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=7241 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=7241 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e630836107 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1449 identity=7241 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e630836107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1449 identity=7241 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e630836107 endpointID=1449 k8sNamespace=openstack k8sPodName=glance-metadefs-load-nzs5v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=3c9e4591-7bcf-463a-bceb-9d53c7be52ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e630836107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1449 identity=7241 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-metadefs-load-nzs5v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 7ad86e58-a338-46ea-9d15-10eb068653b3 default }" containerID=c373213e9ca1601fab6bfae0834233856e20ef196127b245e58219543f91b9a7 datapathConfiguration="&{false false false false false }" interface=lxc7437944ef1fa k8sPodName=openstack/glance-storage-init-hzsgh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c373213e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c373213e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c373213e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identity=65509 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c373213e9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3372 identity=65509 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c373213e9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3372 identity=65509 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c373213e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3372 identity=65509 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c373213e9c endpointID=3372 k8sNamespace=openstack k8sPodName=glance-storage-init-hzsgh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e2714c20-9f7a-4ada-8298-892616ddc23e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c373213e9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3372 identity=65509 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-hzsgh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 1115bbd5-918a-4f72-b951-64323bae96b9 default }" containerID=4f3b6430358d5ad9feb69fd138d8f123146eba596524f2b77bf093f51cfbb896 datapathConfiguration="&{false false false false false }" interface=lxc667a1e466db3 k8sPodName=openstack/glance-api-6c885578f-nhqrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f3b643035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f3b643035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f3b643035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=12371 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f3b643035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2696 identity=12371 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4f3b643035 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2696 identity=12371 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f3b643035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2696 identity=12371 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/glance-api-6c885578f-nhqrq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 e8023051-aa3c-429d-8abf-ce4be7dceb6d default }" containerID=eb71adaacafa8c4b9749ad825554bd728fcd87c42ad4cee2949be0f42aa73460 datapathConfiguration="&{false false false false false }" interface=lxc4a97e6371ac1 k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb71adaaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb71adaaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb71adaaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=11602 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb71adaaca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1950 identity=11602 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.126 1362bdb4-44c2-4c17-b213-19c6f9680543 default }" containerID=85f6a0f930cb8b66f4ec8f37100a9dd0d2be96ba060183abeec93f945af37500 datapathConfiguration="&{false false false false false }" interface=lxc521cf2807eb8 k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85f6a0f930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85f6a0f930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85f6a0f930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=35025 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85f6a0f930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=35025 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eb71adaaca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1950 identity=11602 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb71adaaca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1950 identity=11602 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-conductor-784b5644b9-8wmzn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.59 9932e6f8-4d70-4f3a-bb78-7d2455c1ea40 default }" containerID=4a8897074a6fd5f3ec09e2e25722a41a982001a1c2b81a98105ca322cf679367 datapathConfiguration="&{false false false false false }" interface=lxc881b615c2c84 k8sPodName=openstack/staffeln-db-init-w49m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a8897074a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a8897074a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a8897074a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=13140 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a8897074a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1798 identity=13140 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85f6a0f930 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=35025 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=85f6a0f930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=35025 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/staffeln-api-59cb84796b-dwlnb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4a8897074a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1798 identity=13140 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a8897074a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1798 identity=13140 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a8897074a endpointID=1798 k8sNamespace=openstack k8sPodName=staffeln-db-init-w49m4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=62daac1e-5096-4c17-ad83-83a8fd4da677 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=4a8897074a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1798 identity=13140 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/staffeln-db-init-w49m4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 c5eb681d-2c7c-4c51-a2d4-4beea1616da4 default }" containerID=a1bbc77141f0b2abf00c2fe01721bc19d53913539f9445a0bfccbddcf8386dcf datapathConfiguration="&{false false false false false }" interface=lxc45b9e9a8bc75 k8sPodName=openstack/staffeln-db-sync-kbxv9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1bbc77141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1bbc77141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1bbc77141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=36413 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=8cbe5bf8-9d3d-4ace-ad3b-3f69f265fff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a1bbc77141 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=529 identity=36413 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1bbc77141 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=529 identity=36413 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1bbc77141 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=529 identity=36413 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/staffeln-db-sync-kbxv9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager