level=info msg="Memory available for map entries (0.003% of 67421622272B): 168554055B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="871.473µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="54.382µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="900.804µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.83µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=103.921795ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.05µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.241µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="61.242µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="63.921µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="68.292µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="527.573µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.05µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.13827ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.541796ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="87.322µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="47.971µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="265.238µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="156.484µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="107.182µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.613554ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="87.822µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.701µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.231.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=107.373516ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="15.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.202005ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.71241ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="38.322µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="38.28µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="87.892µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="357.7µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="7.25µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.261µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="246.676µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="852.423µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.459768ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.07µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.181µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.231 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.231 ipAddr.ipv6="" k8sNodeIP=199.19.213.231 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.231" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.80" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.231" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.231} {CiliumInternalIP 10.0.0.80}] 10.0.0.0/24 [] [] 10.0.0.8 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42591" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.47050564s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="17.771µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="14.972µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Start hook executed" duration="88.182µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="9.14µs" function="*job.group.Start" subsys=hive level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1484 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.544243073s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=303.121947ms file-path=/var/run/cilium/state/templates/568c67541077e93a07553b84b7a463ec031c2641778d94c0f8d0119625a8fc50/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 0909a17e-353e-49e5-9501-d99acd007075 default }" containerID=04ee993ef2176086676f24e042eafcc9397fe953f9cf558cc4fdb17435773f4e datapathConfiguration="&{false false false false false }" interface=lxc2c70a229e022 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04ee993ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04ee993ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 da9ddb0c-c1a3-4c33-aed3-2240748c89e8 default }" containerID=e78a60fadf8c21cd84323cf497382784bbb4f159940e70cc0002d96c71b34a89 datapathConfiguration="&{false false false false false }" interface=lxccfad8ac7dd49 k8sPodName=kube-system/coredns-7c96b6546b-vhzsw labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="New endpoint" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=04ee993ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=1593 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04ee993ef2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2117 identity=1593 ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=19646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=952 identity=19646 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identityLabels="reserved:health" ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=916 identity=4 identityLabels="reserved:health" ipv4=10.0.0.8 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.140284751s file-path=/var/run/cilium/state/templates/21ec8f0b3bd4ae8ac0a90afb4d83dca3b21e2a400b6f9ad94bc77f3839fdfa09/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=04ee993ef2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2117 identity=1593 ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=endpoint level=info msg="Successful endpoint creation" containerID=04ee993ef2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2117 identity=1593 ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=916 identity=4 ipv4=10.0.0.8 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID=e78a60fadf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=952 identity=19646 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e78a60fadf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=952 identity=19646 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04ee993ef2 endpointID=2117 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-sx26v subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=d6456770-8be2-4d86-af10-12fdfd0bd14f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=04ee993ef2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2117 identity=1593 ipv4=10.0.0.200 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-sx26v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 6cd0b37d-0503-407e-8fb8-7622459bb1ec default }" containerID=7da54c50877c1c7ebcd685d8d7239558d17ff4bc319c0b049e42ab613d2b21e1 datapathConfiguration="&{false false false false false }" interface=lxc91b25e9342eb k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7da54c5087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7da54c5087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7da54c5087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=6028 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7da54c5087 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4088 identity=6028 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7da54c5087 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4088 identity=6028 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv subsys=endpoint level=info msg="Successful endpoint creation" containerID=7da54c5087 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4088 identity=6028 ipv4=10.0.0.112 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-p8sbv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1484 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01484 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01484 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01484 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01484:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 0e6ca5de-e225-4576-a4ae-0aa0737ee824 default }" containerID=a7a4e5f4de86ea9cd3a279605ebfd0239adb2d98898a3edb2e24acf51acdf17d datapathConfiguration="&{false false false false false }" interface=lxc3bbaaed47879 k8sPodName=kube-system/coredns-67659f764b-p5m6w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7a4e5f4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7a4e5f4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a7a4e5f4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=19646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7a4e5f4de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=919 identity=19646 ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 c3b9c495-7743-4046-b159-4c4034700c40 default }" containerID=8bb705f420be7236ed7eea7d2d2de90bb1cadefb5964485bec20afd2964ae612 datapathConfiguration="&{false false false false false }" interface=lxc93cfbde3352d k8sPodName=kube-system/coredns-67659f764b-5dtdg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb705f420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb705f420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8bb705f420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=19646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb705f420 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=261 identity=19646 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7a4e5f4de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=919 identity=19646 ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7a4e5f4de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=919 identity=19646 ipv4=10.0.0.45 ipv6= k8sPodName=kube-system/coredns-67659f764b-p5m6w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8bb705f420 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=261 identity=19646 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb705f420 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=261 identity=19646 ipv4=10.0.0.6 ipv6= k8sPodName=kube-system/coredns-67659f764b-5dtdg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 ad637a8f-ba1c-4ad2-b3cc-1b234c613aab default }" containerID=56e3c3de8de0c716d3cc9cc9e5e5fc3bd81b434ceb395ffc2d8b4d4d84ca5698 datapathConfiguration="&{false false false false false }" interface=lxcb40587321107 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56e3c3de8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56e3c3de8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56e3c3de8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=39137 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56e3c3de8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=39137 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=56e3c3de8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=160 identity=39137 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56e3c3de8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=160 identity=39137 ipv4=10.0.0.215 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8d9d8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e78a60fadf endpointID=952 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-vhzsw subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e78a60fadf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=952 identity=19646 ipv4=10.0.0.210 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-vhzsw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 a7eeee76-c6f1-486e-aaec-b92611600e2e default }" containerID=27313919e8dd4d245b2b36ebee7aab354346ca3af445f810d80b6970f2e69903 datapathConfiguration="&{false false false false false }" interface=lxcf4791d62311d k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27313919e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27313919e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27313919e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identity=27907 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27313919e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2805 identity=27907 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27313919e8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2805 identity=27907 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=27313919e8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2805 identity=27907 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xgw8w subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 ad55fff6-7c64-434c-af68-c6adbc7cf198 default }" containerID=45e3550ed6b0cc1a07144b6261a5e7d783fdb6dc05f60f60cc3ccfc3ad722b4c datapathConfiguration="&{false false false false false }" interface=lxc6ce8afe11c60 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45e3550ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 e7dd6c49-30b1-436a-a4cb-afedd1e15738 default }" containerID=59e348f5f1c122567e1a911dfe23dfa506499a5539d8af47da1b7584bc80ce27 datapathConfiguration="&{false false false false false }" interface=lxc7a186e148f62 k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59e348f5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45e3550ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59e348f5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45e3550ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=4529 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45e3550ed6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=95 identity=4529 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59e348f5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=20457 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59e348f5f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=304 identity=20457 ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45e3550ed6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=95 identity=4529 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45e3550ed6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=95 identity=4529 ipv4=10.0.0.38 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-4mjr7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 5b67a3d7-67f4-49a0-898d-c0d656f82099 default }" containerID=8c9cb288fe49c6ebddbda08a403a1813986a03f23ef109874aee0359222c8578 datapathConfiguration="&{false false false false false }" interface=lxc53fcf264d80b k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c9cb288fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c9cb288fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=247df49a-9459-4f4e-8211-e9383635207f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=247df49a-9459-4f4e-8211-e9383635207f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=247df49a-9459-4f4e-8211-e9383635207f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=247df49a-9459-4f4e-8211-e9383635207f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c9cb288fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identity=624 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=247df49a-9459-4f4e-8211-e9383635207f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=247df49a-9459-4f4e-8211-e9383635207f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c9cb288fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3472 identity=624 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59e348f5f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=304 identity=20457 ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf subsys=endpoint level=info msg="Successful endpoint creation" containerID=59e348f5f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=304 identity=20457 ipv4=10.0.0.247 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-dxrrf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8c9cb288fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3472 identity=624 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c9cb288fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3472 identity=624 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c9cb288fe endpointID=3472 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-j7x9s subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=247df49a-9459-4f4e-8211-e9383635207f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=247df49a-9459-4f4e-8211-e9383635207f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=8c9cb288fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3472 identity=624 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j7x9s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 b8ccabfd-94ce-4dc7-b2ab-0ce4b793d2da default }" containerID=da37998d2687449cbfb3d46a23d4bfb6237f303dc222d8bf0261cb6a3ee3e503 datapathConfiguration="&{false false false false false }" interface=lxcd8e9c5b5ac0e k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=32183 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=32183 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da37998d26 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2133 identity=32183 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=da37998d26 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=32183 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da37998d26 endpointID=2133 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bgqnb subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=fba63ce4-5869-417b-805d-3d80fee12d03 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=da37998d26 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=32183 ipv4=10.0.0.110 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bgqnb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 fb573ff1-3339-4901-ade7-132808fe7f7f default }" containerID=aee6aecae51969bfcc796ccca5906c4b4e2d6e210dbc70aaedc8f7c077fc8ee4 datapathConfiguration="&{false false false false false }" interface=lxcaf9629a93406 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=7760 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=7760 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aee6aecae5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3708 identity=7760 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=aee6aecae5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3708 identity=7760 ipv4=10.0.0.20 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gth7t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 f64335de-ed67-48f5-a335-a9ea12d3330d default }" containerID=d762de07863e19d7c5f325414dc9ee9a6dbfa0c42292da932c670d987c4c96e8 datapathConfiguration="&{false false false false false }" interface=lxc08bc645f4283 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d762de0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d762de0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d762de0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=2351 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d762de0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3567 identity=2351 ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d762de0786 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3567 identity=2351 ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d762de0786 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3567 identity=2351 ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d762de0786 endpointID=3567 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-8qr62 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=28e126ed-4695-4061-9aa3-c6776244cd8c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d762de0786 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3567 identity=2351 ipv4=10.0.0.82 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8qr62 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d7b4f319-cba7-44f7-a64b-c3eeb969af75] Description:}]" policyAddRequest=531ca9b4-ccc9-45d1-bd7d-cadd225ebee5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=531ca9b4-ccc9-45d1-bd7d-cadd225ebee5 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=706a6526-ce52-44cb-bc6c-adc5b6b3c90d] Description:}]" policyAddRequest=683c9d1c-f220-4d1c-9c01-3796007eee88 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=683c9d1c-f220-4d1c-9c01-3796007eee88 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.104 558f9986-590e-479f-91f2-f027580fcbbf default }" containerID=2a78db9ab4a57d86662536b076790ceca3ad4bfb25bab9db307b663a63c40e7f datapathConfiguration="&{false false false false false }" interface=lxcbeb861b6322a k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a78db9ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a78db9ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a78db9ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=6936 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a78db9ab4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=6936 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2a78db9ab4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1741 identity=6936 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a78db9ab4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1741 identity=6936 ipv4=10.0.0.104 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-5448d56d95-4fk5j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 2ff00e3e-ea1a-4787-8e27-5c9cc5e8415f default }" containerID=5a74dc306fa21bc053d4132932e3703828113300dc6800d6b6ac75a40e999960 datapathConfiguration="&{false false false false false }" interface=lxce323f1c32dbb k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a74dc306f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a74dc306f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a74dc306f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=1896 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a74dc306f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=221 identity=1896 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a74dc306f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=221 identity=1896 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a74dc306f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=221 identity=1896 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-9czmf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 c8afb932-3a96-4ce9-995c-c4e70b3c85dc default }" containerID=ca9048af3991c2ad4e3683a9e0da9afefc41993d6425e8f04747143c0c00a300 datapathConfiguration="&{false false false false false }" interface=lxcb159873fde77 k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca9048af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca9048af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca9048af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=13865 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca9048af39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=13865 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca9048af39 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=846 identity=13865 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca9048af39 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=846 identity=13865 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-rhqsz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.50 7293ae13-a1a4-42ed-9566-2e6a0651a6db default }" containerID=72ca2761ca69082fdd0b2aaa36741f5a5f6f87aafc217b6a8102235ebc324825 datapathConfiguration="&{false false false false false }" interface=lxce285852681a5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72ca2761ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72ca2761ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=72ca2761ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=4796 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72ca2761ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=4796 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 7a571452-604f-47b0-8f8d-c0445ab7c8b4 default }" containerID=b794e2a13f22da1913a05c08c644552ee3dd72870763e934a939fda19a0eb147 datapathConfiguration="&{false false false false false }" interface=lxcfacbab3b74bc k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b794e2a13f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b794e2a13f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b794e2a13f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b794e2a13f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2006 identity=53460 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72ca2761ca datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1095 identity=4796 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72ca2761ca datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1095 identity=4796 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b794e2a13f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2006 identity=53460 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b794e2a13f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2006 identity=53460 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b794e2a13f endpointID=2006 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b794e2a13f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2006 identity=53460 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-da013a48-c48f-4925-91ab-c2e5ec4ffc72 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 f18ad3e5-4cff-43d3-807c-ce3f4b7a1d92 default }" containerID=197d0a6da1666581c98617131e92641adbad7b283d20ab1cf4797fa5fd3fbb5d datapathConfiguration="&{false false false false false }" interface=lxc6946ba917b25 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identity=31514 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2648 identity=31514 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=197d0a6da1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2648 identity=31514 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=197d0a6da1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2648 identity=31514 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=aa0d822f-7608-4fcb-b933-ef223040de0b] Description:}]" policyAddRequest=533baa52-6d98-4785-bc71-d7300c8b6bf1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=533baa52-6d98-4785-bc71-d7300c8b6bf1 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.223 2d48aced-bc48-4419-b4ba-c278eead9187 default }" containerID=0f4df2167e29531535424105e28a01aa0f3b77db0ad066a453fecc5299ad6370 datapathConfiguration="&{false false false false false }" interface=lxc1ac6e52ab72b k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f4df2167e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f4df2167e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f4df2167e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f4df2167e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1755 identity=53460 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f4df2167e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1755 identity=53460 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f4df2167e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1755 identity=53460 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=daemon level=info msg="Delete endpoint request" containerID=0f4df2167e endpointID=1755 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0f4df2167e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1755 identity=53460 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4e4cc44c-f58f-44d1-ab96-861e9a008ae0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.23 beade0eb-c519-4c30-951a-37eb8c772c2a default }" containerID=96398c99e31fc595582f6fe66518caaadab68436afcdb113c63c86165eb74b9f datapathConfiguration="&{false false false false false }" interface=lxc2854b63d160e k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96398c99e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96398c99e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96398c99e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=40873 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96398c99e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=40873 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=96398c99e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1283 identity=40873 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96398c99e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1283 identity=40873 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=d652633d-8196-4d0a-8e75-92bf45ff4628] Description:}]" policyAddRequest=3d6dfe87-23ee-4027-bbd7-4704806b99e1 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3d6dfe87-23ee-4027-bbd7-4704806b99e1 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.30 d41b7dee-5663-460b-85bb-91bc77a05812 default }" containerID=5acfe74196600d164ed72dbe8f142907f8b52871290e0d14e41659ee82c132f9 datapathConfiguration="&{false false false false false }" interface=lxc9f7a9534dd24 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5acfe74196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5acfe74196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5acfe74196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=16125 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5acfe74196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=16125 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5acfe74196 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=16125 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5acfe74196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=16125 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009380875728759452 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.187 20a5b7b4-9beb-4de7-913b-5a3fc351c935 default }" containerID=6d39c11d4a0a71a6aaf618d8d7019ad4c9ebb4395ee4bd7022b71edbca980263 datapathConfiguration="&{false false false false false }" interface=lxc4f490228d1d4 k8sPodName=monitoring/node-feature-discovery-worker-x2mhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=25804 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=153 identity=25804 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6d39c11d4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=153 identity=25804 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d39c11d4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=153 identity=25804 ipv4=10.0.0.187 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-x2mhl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 80b88e00-644b-45be-8f9f-b5ffc66569be default }" containerID=e3e46f7b31462b698f002dc48ac62cb27de1e7340724baaf7eeadea2e21af912 datapathConfiguration="&{false false false false false }" interface=lxc5b046c24e941 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3e46f7b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3e46f7b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.131 d0375920-4b7c-4071-8d98-94844c38e3b3 default }" containerID=e81b35e1ddb9e0c90653bd4b618a000751ec7c7395b420a0e0410fbf4ddee2f5 datapathConfiguration="&{false false false false false }" interface=lxc40369ed4460c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e81b35e1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e81b35e1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3e46f7b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=6784 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3e46f7b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=829 identity=6784 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e81b35e1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=23494 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e81b35e1dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=23494 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e3e46f7b31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=829 identity=6784 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3e46f7b31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=829 identity=6784 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-m8cjk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e81b35e1dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=525 identity=23494 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e81b35e1dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=525 identity=23494 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qn8wh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.107 898428da-3412-416c-89a4-806cb7a261ac default }" containerID=4aad3a7a188f2bd9c54cce1056248cf512100b537ed209d81903349f8dc86085 datapathConfiguration="&{false false false false false }" interface=lxc4d42b526351f k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aad3a7a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aad3a7a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4aad3a7a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=14252 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aad3a7a18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3783 identity=14252 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4aad3a7a18 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3783 identity=14252 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aad3a7a18 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3783 identity=14252 ipv4=10.0.0.107 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-g9znh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1484 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01484 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01484 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01484 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01484:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1484 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 ab95f01c-67bb-43a3-84ea-5897baa41716 default }" containerID=fd0b192e48714c37a2e52b41180ec18859cde3e60853b24c2310ed35d8f764bd datapathConfiguration="&{false false false false false }" interface=lxcaf46e6502909 k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd0b192e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd0b192e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd0b192e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=29301 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd0b192e48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=29301 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd0b192e48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2010 identity=29301 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd0b192e48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=29301 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd0b192e48 endpointID=2010 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-h6hm4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0d8f521e-f607-49ae-b5f8-dd39b339b6fb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fd0b192e48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=29301 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-h6hm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 161b345c-7999-4ca4-b6ed-f35a1529de2c default }" containerID=455adcc7ad520ddc1d3fc68e91600239d59ebb397378fef558e73c0d8091f403 datapathConfiguration="&{false false false false false }" interface=lxc34b0fa6a3103 k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=455adcc7ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=455adcc7ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=455adcc7ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=12217 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=455adcc7ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=12217 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 1d4541c8-57b0-4cb5-bf95-3b8d20a79020 default }" containerID=65678917d83854b2fdf20a00bf21ec3659cf0f0d6da1c45bdaaa2f8a3eefc594 datapathConfiguration="&{false false false false false }" interface=lxcd14385778e72 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.37 f7927248-2942-4b50-b45d-34dfc1a8e64c default }" containerID=d009f78051032036ea088a4eaf4c114d3c1ccaef9d8b46d6ecf182708b2db866 datapathConfiguration="&{false false false false false }" interface=lxc40d177926293 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65678917d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg subsys=endpoint level=info msg="New endpoint" containerID=d009f78051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65678917d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d009f78051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65678917d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=38684 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=65678917d8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=38684 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d009f78051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=47054 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d009f78051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3892 identity=47054 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=455adcc7ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=12217 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb subsys=endpoint level=info msg="Successful endpoint creation" containerID=455adcc7ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=12217 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d4bb9486b-bptdb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=65678917d8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=675 identity=38684 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg subsys=endpoint level=info msg="Successful endpoint creation" containerID=65678917d8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=675 identity=38684 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-tz5qg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d009f78051 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3892 identity=47054 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d009f78051 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3892 identity=47054 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qjrsv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 36ad74b2-a77d-401d-9cdc-4479843b5e08 default }" containerID=5c03d5d3b3f021fd5ce49d5f7c98188b5efbe641e0e0d8535731d2352cd48965 datapathConfiguration="&{false false false false false }" interface=lxcd03f8f013dba k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c03d5d3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c03d5d3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=59ab1a95-3560-4593-aa60-f720ac220834,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=59ab1a95-3560-4593-aa60-f720ac220834,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=59ab1a95-3560-4593-aa60-f720ac220834;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=59ab1a95-3560-4593-aa60-f720ac220834;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c03d5d3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=2980 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=59ab1a95-3560-4593-aa60-f720ac220834,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=59ab1a95-3560-4593-aa60-f720ac220834,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c03d5d3b3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=593 identity=2980 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c03d5d3b3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=593 identity=2980 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c03d5d3b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=2980 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5c03d5d3b3 endpointID=593 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-sndpp subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=59ab1a95-3560-4593-aa60-f720ac220834 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=59ab1a95-3560-4593-aa60-f720ac220834 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5c03d5d3b3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=593 identity=2980 ipv4=10.0.0.86 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-sndpp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 b55cb13a-6621-4613-a12c-24965bb851e6 default }" containerID=1a849d032d07c864a6729469df4464d74478ec3f2939837cc15ddb42bb796e35 datapathConfiguration="&{false false false false false }" interface=lxcd57472732da9 k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a849d032d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a849d032d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a849d032d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a849d032d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identity=53460 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a849d032d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2325 identity=53460 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a849d032d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2325 identity=53460 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.39 f769b6e5-fb2e-4fcf-8020-0c439213842f default }" containerID=0ef931d2900629f5543020a7f34169f533bd76008e994cc3c6494ac344b0d8d4 datapathConfiguration="&{false false false false false }" interface=lxcad968668cffa k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ef931d290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ef931d290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0ef931d290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ef931d290 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2819 identity=53460 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ef931d290 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2819 identity=53460 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ef931d290 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2819 identity=53460 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=daemon level=info msg="Delete endpoint request" containerID=0ef931d290 endpointID=2819 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=1a849d032d endpointID=2325 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0ef931d290 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2819 identity=53460 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a36958d3-a040-4c74-b6a0-eadb4eee37db subsys=endpoint level=info msg="Removed endpoint" containerID=1a849d032d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2325 identity=53460 ipv4=10.0.0.216 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-12a2c8dd-ddcb-41e8-b9a0-f1c58b85f308 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.163 04c00435-4fb0-4e54-b5f6-7254457a08bd default }" containerID=e91514b2438e94663ab81fd41464bff9b19ede327370aed1101dc0d7963ad0eb datapathConfiguration="&{false false false false false }" interface=lxc04f0e898338a k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e91514b243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e91514b243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e91514b243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=25414 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e91514b243 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1170 identity=25414 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e91514b243 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1170 identity=25414 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=e91514b243 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1170 identity=25414 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-5fcmf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 e1a68ed5-e434-4007-b06d-920205c15da7 default }" containerID=fbf5f04c940e9b0ac19c44e0e5c92e03174fbebbffdb6adbf35b653f464268f4 datapathConfiguration="&{false false false false false }" interface=lxcf67ba47c8eaf k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.111 5f604154-1a7e-4fdb-ab20-eaffc16e78f5 default }" containerID=fc6f7da76a22ad23580481ade00cec741e94fe7626c75d03bbac5ffc43d1ae4a datapathConfiguration="&{false false false false false }" interface=lxcc67b09cb7d93 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbf5f04c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=fc6f7da76a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbf5f04c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=fc6f7da76a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbf5f04c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=23818 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbf5f04c94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=23818 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc6f7da76a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=6357 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc6f7da76a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=6357 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fbf5f04c94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2184 identity=23818 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbf5f04c94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2184 identity=23818 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc6f7da76a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=132 identity=6357 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc6f7da76a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=6357 ipv4=10.0.0.111 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 a8128b55-c698-4bf7-b8b5-b5ea553e99d0 default }" containerID=3d3fd7ee8c5fb7962b9e398b6bd6a458cdc15e5cef7bda7b4f78894f08d55524 datapathConfiguration="&{false false false false false }" interface=lxc334d0605fdcc k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d3fd7ee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d3fd7ee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d3fd7ee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=5097 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d3fd7ee8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2530 identity=5097 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d3fd7ee8c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2530 identity=5097 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d3fd7ee8c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2530 identity=5097 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.232 111a34af-43cf-4f70-8c20-58192714e8b2 default }" containerID=f21861f2371b050e2d9fa66fbc67b2882adb9dffa656ca43f277c65ffa39f346 datapathConfiguration="&{false false false false false }" interface=lxc94a2a2a15baf k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f21861f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f21861f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f21861f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f21861f237 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=53460 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 380a5c04-580c-4317-865d-8771e0c4cc00 default }" containerID=ef84df87b5d20fda433956167d350ea31dea1ed01ea9908f339e583d50b1c1ef datapathConfiguration="&{false false false false false }" interface=lxc10d8eee925b6 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef84df87b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef84df87b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef84df87b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=41722 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef84df87b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=41722 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f21861f237 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=53460 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f21861f237 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=53460 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ef84df87b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2751 identity=41722 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef84df87b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2751 identity=41722 ipv4=10.0.0.141 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.229 01756c76-6b14-4533-a014-b253b9638bf2 default }" containerID=b21fd56f2d259b629dbd840b7fcb7f84ceae6cd03b0d77bcda4ff5f8dfd5ab6c datapathConfiguration="&{false false false false false }" interface=lxc1d55aff932b5 k8sPodName=monitoring/vector-n5fcr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=63536 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2640 identity=63536 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b21fd56f2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2640 identity=63536 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b21fd56f2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2640 identity=63536 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/vector-n5fcr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f21861f237 endpointID=112 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f21861f237 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=53460 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-31251cc2-ee50-4d4a-b516-d4af48c9f76c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 03d8fbbe-3548-4e57-8e62-76c1e4d45516 default }" containerID=a4568396784795e5dbe33187e190f79f65d4263360d7da020c078362d80affbd datapathConfiguration="&{false false false false false }" interface=lxc9216064565a8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a456839678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a456839678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a456839678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=25633 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a456839678 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1004 identity=25633 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a456839678 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1004 identity=25633 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a456839678 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1004 identity=25633 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-px8d2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 e2ea8c2e-9fca-4733-ab42-ddb83a4a2719 default }" containerID=a59111db4b9b677cc98fb5542090ebe21b4a9ec1eea722b0d8f203b459eedd45 datapathConfiguration="&{false false false false false }" interface=lxc507e7e7304fe k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a59111db4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a59111db4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a59111db4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identity=38925 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a59111db4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1266 identity=38925 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a59111db4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1266 identity=38925 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a59111db4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1266 identity=38925 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 ffdbe5ac-573e-4f84-8314-f078582a0948 default }" containerID=76c32f6ebc8dd8d6409f236ddcdbae09e3a87da74ea5a7293790df1bf9624fca datapathConfiguration="&{false false false false false }" interface=lxcef0d01098e46 k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3370 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3370 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3370 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3370 identity=61918 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3370 identity=61918 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76c32f6ebc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3370 identity=61918 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c32f6ebc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3370 identity=61918 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-bc8c8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.32 e6ad1b7b-43a7-4907-9fc5-9a63e9ea8981 default }" containerID=4eec29467c683664508246f824d92f99dfda3e62bb74a903a8c7fc2c460fe2a7 datapathConfiguration="&{false false false false false }" interface=lxc656ddab2c95c k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4eec29467c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4eec29467c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4eec29467c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4eec29467c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=661 identity=53460 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4eec29467c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=661 identity=53460 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4eec29467c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=661 identity=53460 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=daemon level=info msg="Delete endpoint request" containerID=4eec29467c endpointID=661 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4eec29467c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=661 identity=53460 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4ac6b9a4-80e6-47c5-bfcf-39ff768d6807 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 fdacddbe-3753-4c3d-831a-70a9d8792078 default }" containerID=81be3e5b7e20c6a6ad60b29f3c5e1907a85a356743344cb9fbc57f87b8846a60 datapathConfiguration="&{false false false false false }" interface=lxc5b49fcfc0a73 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81be3e5b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81be3e5b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81be3e5b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=2727 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=81be3e5b7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1289 identity=2727 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81be3e5b7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1289 identity=2727 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81be3e5b7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1289 identity=2727 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.194 9f2686d4-9a49-4c13-bc2d-6b700bf542b1 default }" containerID=81ea46be5174e55f99171d9edffc9f427c028eda5041d6ff3c2e9779f7558566 datapathConfiguration="&{false false false false false }" interface=lxcef99229725f7 k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=44155 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1804 identity=44155 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 a7fe2c1c-1983-4ffd-ad88-647926c8d1ca default }" containerID=b64faf615bc8b552d581b2cec8935588343bf895e5398afd1efe5cc02f22ed05 datapathConfiguration="&{false false false false false }" interface=lxc8d708673f759 k8sPodName=openstack/keystone-credential-setup-n7jtz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b64faf615b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b64faf615b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b64faf615b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=65444 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b64faf615b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=65444 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81ea46be51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1804 identity=44155 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr subsys=endpoint level=info msg="Successful endpoint creation" containerID=81ea46be51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1804 identity=44155 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/keystone-api-6c9cd57848-dj8mr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b64faf615b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=65444 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=endpoint level=info msg="Successful endpoint creation" containerID=b64faf615b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=65444 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b64faf615b endpointID=8 k8sNamespace=openstack k8sPodName=keystone-credential-setup-n7jtz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=1d30786d-d696-419e-ad0b-4504a3e9f77a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b64faf615b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=65444 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/keystone-credential-setup-n7jtz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 45584cf5-a70f-4e89-b798-b5a6f94b9e0a default }" containerID=3c7415fa07a084b33cd218317025adc3e52020f675fd73a5d093f4c267b3e6a2 datapathConfiguration="&{false false false false false }" interface=lxc18c28a30495a k8sPodName=openstack/keystone-db-init-74w84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identity=7271 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3692 identity=7271 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c7415fa07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3692 identity=7271 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c7415fa07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3692 identity=7271 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c7415fa07 endpointID=3692 k8sNamespace=openstack k8sPodName=keystone-db-init-74w84 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=5269af4d-cc4a-499b-9d90-1a743935e1fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c7415fa07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3692 identity=7271 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-init-74w84 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 e1d913a7-6573-41a4-b7ab-a6ee07b17125 default }" containerID=1ac179b4680db7f51d174a1c9e9d326a23cef9713598f4cba4872278be2d1458 datapathConfiguration="&{false false false false false }" interface=lxcc176407aaa5e k8sPodName=openstack/keystone-fernet-setup-nbcvt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ac179b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ac179b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ac179b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=41561 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ac179b468 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2893 identity=41561 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1ac179b468 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2893 identity=41561 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ac179b468 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2893 identity=41561 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ac179b468 endpointID=2893 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-nbcvt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=76b7750f-2e71-4d96-bb47-02c873f924d1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1ac179b468 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2893 identity=41561 ipv4=10.0.0.192 ipv6= k8sPodName=openstack/keystone-fernet-setup-nbcvt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 9c953989-a8fd-4a03-a41c-d4a8e7bed78e default }" containerID=6df49382d1213304f600c9c7a0c35cd0e38f661e165b4f782d997d25b6ee8691 datapathConfiguration="&{false false false false false }" interface=lxc968297c28121 k8sPodName=openstack/keystone-db-sync-cx45p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=23415 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=381 identity=23415 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6df49382d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=381 identity=23415 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=endpoint level=info msg="Successful endpoint creation" containerID=6df49382d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=23415 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6df49382d1 endpointID=381 k8sNamespace=openstack k8sPodName=keystone-db-sync-cx45p subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=f2cc2bfe-8b5e-4576-bf3f-e62a4995be47 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6df49382d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=381 identity=23415 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/keystone-db-sync-cx45p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 a7b07050-340c-478f-9b3f-de3799d6380a default }" containerID=c0dd03037f658a5a87444cc64bad079275e5e5752900067f498c45ee0713c023 datapathConfiguration="&{false false false false false }" interface=lxc5924aac1576e k8sPodName=openstack/keystone-rabbit-init-gcq47 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0dd03037f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0dd03037f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0dd03037f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=9642 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c0dd03037f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=9642 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0dd03037f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=9642 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0dd03037f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=9642 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0dd03037f endpointID=804 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-gcq47 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f04b8b39-a928-409c-8b5a-ee08e803d61b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c0dd03037f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=9642 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-rabbit-init-gcq47 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 684f8970-8bb1-40ac-b3a0-b0105636dcaf default }" containerID=ef47dc3ffc40e921b4246e4667b485606fce41dd4f145c4bb68fee2a4211d1ad datapathConfiguration="&{false false false false false }" interface=lxcbd9ebb10cc0a k8sPodName=openstack/keystone-domain-manage-j9fpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=47153 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=208 identity=47153 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef47dc3ffc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=208 identity=47153 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef47dc3ffc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=208 identity=47153 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ef47dc3ffc endpointID=208 k8sNamespace=openstack k8sPodName=keystone-domain-manage-j9fpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3b450191-5ed0-4a3f-ab25-2357e3cf1ec6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ef47dc3ffc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=208 identity=47153 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/keystone-domain-manage-j9fpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 0ba8310e-d95f-46e2-a847-632ffe1f3e06 default }" containerID=fdaf756ab560bf8311e9e8351de959ca90be1db8b652ee1172ab38a2b3a9b453 datapathConfiguration="&{false false false false false }" interface=lxcb75292db28d9 k8sPodName=openstack/keystone-bootstrap-trn54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=323d80f1-f694-4193-8c1b-742406af4713,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=323d80f1-f694-4193-8c1b-742406af4713,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=323d80f1-f694-4193-8c1b-742406af4713;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=323d80f1-f694-4193-8c1b-742406af4713;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=2590 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=323d80f1-f694-4193-8c1b-742406af4713,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=323d80f1-f694-4193-8c1b-742406af4713,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=2590 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdaf756ab5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=102 identity=2590 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdaf756ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=2590 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdaf756ab5 endpointID=102 k8sNamespace=openstack k8sPodName=keystone-bootstrap-trn54 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=323d80f1-f694-4193-8c1b-742406af4713 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=323d80f1-f694-4193-8c1b-742406af4713 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fdaf756ab5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=2590 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-bootstrap-trn54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 4a3494c1-fa96-4ad7-bd08-f646fa07e1ac default }" containerID=0eb564039d313840c41639806f3742f33ee30865b323b359e24f7e89e92f6612 datapathConfiguration="&{false false false false false }" interface=lxc0649ddda3c17 k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0eb564039d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0eb564039d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0eb564039d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0eb564039d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=53460 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0eb564039d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1150 identity=53460 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=0eb564039d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=53460 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=daemon level=info msg="Delete endpoint request" containerID=0eb564039d endpointID=1150 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0eb564039d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=53460 ipv4=10.0.0.91 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ece0579c-ee2c-4446-9b49-0dfd15ae3cbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 e689688b-3d2c-4073-a7c7-760565efdf54 default }" containerID=edcd74a774bb642ac0f6578be81ef3981e66ed3fda5aff19b7a4ae99f2c629e4 datapathConfiguration="&{false false false false false }" interface=lxcc3d6a3dec455 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=33366 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=33366 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edcd74a774 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=337 identity=33366 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edcd74a774 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=337 identity=33366 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.033806998796109676 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.108 79d11d55-ef46-4bdf-b04e-d34abfd2bf8d default }" containerID=ca26c68f8597eed3633f82478544d43131255a2a3edb69b4b2a6a8fde8502fe9 datapathConfiguration="&{false false false false false }" interface=lxc2146c7d095a2 k8sPodName=openstack/barbican-api-567c784675-tgtp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca26c68f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca26c68f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca26c68f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=21906 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ca26c68f85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1789 identity=21906 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca26c68f85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1789 identity=21906 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca26c68f85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1789 identity=21906 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/barbican-api-567c784675-tgtp4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.236 b0c72bef-7828-420d-91f2-358dfcb1aa12 default }" containerID=e859817fc6de0ae7926bd2631e7f29b3185eb9d9e3a27b1524dc0f4f54d73cf7 datapathConfiguration="&{false false false false false }" interface=lxc03cb5d606066 k8sPodName=openstack/barbican-db-init-52m6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e859817fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3695 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e859817fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3695 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e859817fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3695 identity=56742 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e859817fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3695 identity=56742 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e859817fc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3695 identity=56742 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=e859817fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3695 identity=56742 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e859817fc6 endpointID=3695 k8sNamespace=openstack k8sPodName=barbican-db-init-52m6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=cdd51c1b-7bb2-4666-87b6-9581ac03f44b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e859817fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3695 identity=56742 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-db-init-52m6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 4d121370-e370-4389-93d1-70f12cfe7ea4 default }" containerID=15282f8804556632ac18b4fe1f37f8426236c951d1909cfc9959169bb4663ab9 datapathConfiguration="&{false false false false false }" interface=lxccdca4383b4be k8sPodName=openstack/barbican-db-sync-7wlgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15282f8804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15282f8804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15282f8804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=18665 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15282f8804 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=504 identity=18665 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=15282f8804 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=504 identity=18665 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=15282f8804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=18665 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15282f8804 endpointID=504 k8sNamespace=openstack k8sPodName=barbican-db-sync-7wlgm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=52778c78-ec24-44a5-84f9-e8027eac49b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=15282f8804 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=504 identity=18665 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/barbican-db-sync-7wlgm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 d85238bf-18f9-41ca-8922-d30e85ef09a5 default }" containerID=0535be2426fc91403705858e61d69344ee2fa64bf67bd4b2f4ed04c2ac20bec2 datapathConfiguration="&{false false false false false }" interface=lxc61e31cfaee70 k8sPodName=openstack/barbican-rabbit-init-rd68w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0535be2426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0535be2426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0535be2426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=42408 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0535be2426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2232 identity=42408 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0535be2426 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2232 identity=42408 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=endpoint level=info msg="Successful endpoint creation" containerID=0535be2426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2232 identity=42408 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0535be2426 endpointID=2232 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-rd68w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=146adf1e-990e-42f4-a55a-9ba6137566bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0535be2426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2232 identity=42408 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/barbican-rabbit-init-rd68w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 878520e9-a839-412e-baff-8c7c175e88d1 default }" containerID=a0139a8032cffe538c675674cb1167f970e94098ba802bad5f1b96e07409496f datapathConfiguration="&{false false false false false }" interface=lxcbb14c0800a29 k8sPodName=openstack/barbican-ks-service-w25g2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=6391 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2639 identity=6391 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a0139a8032 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2639 identity=6391 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0139a8032 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=6391 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0139a8032 endpointID=2639 k8sNamespace=openstack k8sPodName=barbican-ks-service-w25g2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=d6232eef-3483-4cc1-9439-54e6baa329d3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a0139a8032 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2639 identity=6391 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/barbican-ks-service-w25g2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 5b4fd9aa-c994-44f3-bf99-dc9457301051 default }" containerID=30e1bbfd0c022c431cc838c187b15680e4e997925c9f067c5e38691a0d71bebb datapathConfiguration="&{false false false false false }" interface=lxca853647df4cd k8sPodName=openstack/barbican-ks-endpoints-rs2ds labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=7767 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1910 identity=7767 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30e1bbfd0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1910 identity=7767 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=endpoint level=info msg="Successful endpoint creation" containerID=30e1bbfd0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=7767 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=30e1bbfd0c endpointID=1910 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rs2ds subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d3353a7a-5ede-4571-86bc-4b6e3f3b9cf2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=30e1bbfd0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1910 identity=7767 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rs2ds subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.177 23643a93-1704-462b-9e41-b86a4e8fe63c default }" containerID=4524033856d5ad123729755eda364192139fe0a5e9b22bf9af63be87be765ff6 datapathConfiguration="&{false false false false false }" interface=lxc36debf77d5c2 k8sPodName=openstack/barbican-ks-user-cqg5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4524033856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4524033856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4524033856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=12150 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4524033856 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=12150 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4524033856 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=408 identity=12150 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=4524033856 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=408 identity=12150 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=daemon level=info msg="Delete endpoint request" containerID=4524033856 endpointID=408 k8sNamespace=openstack k8sPodName=barbican-ks-user-cqg5m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=a2c63a8b-8b79-4e59-a84f-f9e863c95585 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4524033856 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=408 identity=12150 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/barbican-ks-user-cqg5m subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.52 864c7ccc-5f4d-43d5-b633-9abbc0637b87 default }" containerID=6ccdb357a6254e14ad433a072a461c7a44dfad3d094ceb40d4c58d02292eb32c datapathConfiguration="&{false false false false false }" interface=lxc570cb2e62ea2 k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=43521 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1763 identity=43521 ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ccdb357a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1763 identity=43521 ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ccdb357a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1763 identity=43521 ipv4=10.0.0.52 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-7b66cfb94c-tfbmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 6d09cf2b-d925-4952-a886-44a6082683ba default }" containerID=a70f1cbeab41089cadb2b7923ba04547b729996fcb53522be4474ee9bae364da datapathConfiguration="&{false false false false false }" interface=lxc49a222eeed5e k8sPodName=openstack/rook-ceph-detect-version-z6f82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=22620 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=22620 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a70f1cbeab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3632 identity=22620 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a70f1cbeab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3632 identity=22620 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a70f1cbeab endpointID=3632 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-z6f82 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=92c2b99b-e1dc-484f-86f5-d0e0a3153c80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=a70f1cbeab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3632 identity=22620 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/rook-ceph-detect-version-z6f82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 fbe27560-3f74-4ae8-904b-ff171b007c7d default }" containerID=5fd41dcb1b63c3044f51c53f88b5517ef56af32f22bc2db722566f6829e21139 datapathConfiguration="&{false false false false false }" interface=lxc9521e7d570e7 k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fd41dcb1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fd41dcb1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fd41dcb1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identity=2580 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fd41dcb1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2368 identity=2580 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5fd41dcb1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2368 identity=2580 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fd41dcb1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2368 identity=2580 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=daemon level=info msg="Delete endpoint request" containerID=5fd41dcb1b endpointID=2368 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-kkf7t subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=619b59ee-beb7-4523-b2df-044cef7964c3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=5fd41dcb1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2368 identity=2580 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-kkf7t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 7a542c98-40e0-4524-ab49-d0407878a702 default }" containerID=a64cf64e43fca0ec4f265b3f4a32d6764f14275dacc223aafa4800a650f564b5 datapathConfiguration="&{false false false false false }" interface=lxc7ee03cc64c62 k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a64cf64e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a64cf64e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a64cf64e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=53460 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a64cf64e43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=53460 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a64cf64e43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=53460 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a64cf64e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=53460 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=daemon level=info msg="Delete endpoint request" containerID=a64cf64e43 endpointID=182 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a64cf64e43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=53460 ipv4=10.0.0.225 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8d6a3f99-f83d-4cdf-b998-342f84796ee8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 bc9e6d02-1473-45b4-8989-9e71ac190f7a default }" containerID=1682f00040e48bb592252a99f70631def8ebfd70335f09d334c4a4746e52a42f datapathConfiguration="&{false false false false false }" interface=lxc134c0fc24129 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1682f00040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1682f00040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1682f00040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=24028 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1682f00040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2395 identity=24028 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1682f00040 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2395 identity=24028 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1682f00040 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2395 identity=24028 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 47347787-e305-4f32-a271-77b1bedec023 default }" containerID=54d8e676dfcc1bbf6853914bd90f9b268f9ad45c3808e94fa796861d5c59d123 datapathConfiguration="&{false false false false false }" interface=lxcc2bb0b47ea44 k8sPodName=openstack/glance-db-init-4zsmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identity=2307 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4091 identity=2307 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54d8e676df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4091 identity=2307 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=54d8e676df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4091 identity=2307 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54d8e676df endpointID=4091 k8sNamespace=openstack k8sPodName=glance-db-init-4zsmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=bd18d653-c9c1-4bde-a559-54810e6fe486 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=54d8e676df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4091 identity=2307 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/glance-db-init-4zsmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 755c0e9c-b063-43c1-bd94-1840fba27b74 default }" containerID=74aaaf310568952b3f7ee7818fc8979b6f9c595445a0729ef2d6707f17b89650 datapathConfiguration="&{false false false false false }" interface=lxcfa60ec138541 k8sPodName=openstack/glance-db-sync-7vn5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74aaaf3105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74aaaf3105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74aaaf3105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=41647 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74aaaf3105 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=41647 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=74aaaf3105 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1878 identity=41647 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=74aaaf3105 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=41647 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74aaaf3105 endpointID=1878 k8sNamespace=openstack k8sPodName=glance-db-sync-7vn5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=229b999b-60c8-48f3-ba82-ca01e6bd73c1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74aaaf3105 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=41647 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-sync-7vn5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 a30ac129-7e3e-4a04-8fb2-228dddce00de default }" containerID=731573337ec86deb337a51e69734194ece3a2f30d498a05d26758b1e6a053bf0 datapathConfiguration="&{false false false false false }" interface=lxcd811ad0edb84 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=731573337e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=731573337e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=731573337e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=2347 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=731573337e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1734 identity=2347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.114 aeb22346-0d8c-4efb-a0da-80aa660b193a default }" containerID=ac74731593541c1604ffec3592ba1668af567fb327c9797a5a10ef17d12a6b93 datapathConfiguration="&{false false false false false }" interface=lxc27cf40d24fe5 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac74731593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac74731593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac74731593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=32548 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac74731593 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=32548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=731573337e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1734 identity=2347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=731573337e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1734 identity=2347 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-fvl5j subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ac74731593 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1777 identity=32548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac74731593 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=32548 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-vqpg7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.130 e0d5378f-6d17-4d72-a7a5-ba15a2a5af78 default }" containerID=26b97cfde75f7b8b196446020fe2bcaed3ad09cd39c1a69c5d2e5b99e498012e datapathConfiguration="&{false false false false false }" interface=lxcf254f25b440f k8sPodName=openstack/glance-rabbit-init-prpwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26b97cfde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26b97cfde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26b97cfde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=9309 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26b97cfde7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=9309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26b97cfde7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=364 identity=9309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=26b97cfde7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=364 identity=9309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26b97cfde7 endpointID=364 k8sNamespace=openstack k8sPodName=glance-rabbit-init-prpwz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=20cb1b4a-241d-46e0-9a7b-7607bfc0dd6f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=26b97cfde7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=364 identity=9309 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/glance-rabbit-init-prpwz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 b5ea54a6-bc61-49e3-88ae-8b2fd0c9b130 default }" containerID=5673fa729bdf280a64f560dcdde4928750402222c0d05f469b231f422e29d7c5 datapathConfiguration="&{false false false false false }" interface=lxcc5013ba05f63 k8sPodName=openstack/glance-ks-service-jhvfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5673fa729b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5673fa729b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5673fa729b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=8579 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5673fa729b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2525 identity=8579 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5673fa729b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2525 identity=8579 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=5673fa729b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=8579 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5673fa729b endpointID=2525 k8sNamespace=openstack k8sPodName=glance-ks-service-jhvfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=8258a8ee-5a3b-4e58-9f21-e0bc526848de k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5673fa729b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2525 identity=8579 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-ks-service-jhvfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 52843570-8c21-4509-bc10-fecdf8beb654 default }" containerID=ddcee37717a30e57a5b8c35deb1adde89aa383b9005e80235a1031e3dbd798f5 datapathConfiguration="&{false false false false false }" interface=lxc5a5de3aa250d k8sPodName=openstack/glance-ks-endpoints-xrvc4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddcee37717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddcee37717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddcee37717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=63593 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddcee37717 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=63593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ddcee37717 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=63593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddcee37717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=63593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.97 a36d8307-ae8a-4c1b-9309-f1d77185a931 default }" containerID=cb9707694130894d666a2fef241025d0f32e45067f35b357490b3f3c587f8b45 datapathConfiguration="&{false false false false false }" interface=lxc96b3f4c16693 k8sPodName=openstack/ceph-object-controller-detect-version-75f52 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb97076941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb97076941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.5;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb97076941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=12373 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.5" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb97076941 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=12373 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb97076941 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=12373 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb97076941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=12373 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb97076941 endpointID=110 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-75f52 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=27e7ed91-62e2-49ba-a383-5f43398c4cf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.5]" subsys=allocator level=info msg="Removed endpoint" containerID=cb97076941 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=12373 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-75f52 subsys=endpoint level=info msg="Delete endpoint request" containerID=ddcee37717 endpointID=1244 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-xrvc4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=426fde2c-3f6d-4cd2-a8d6-785866f370bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ddcee37717 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=63593 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/glance-ks-endpoints-xrvc4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 4d8d9aac-fbbc-45e8-b408-f3a625161b9c default }" containerID=666e7bc76454171b299690da8e39a869260639cd7c731c5780e47f48657423ce datapathConfiguration="&{false false false false false }" interface=lxcf555e01fd2aa k8sPodName=openstack/glance-ks-user-9fjb6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=666e7bc764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=666e7bc764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=666e7bc764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=7053 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=666e7bc764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=7053 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=666e7bc764 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2330 identity=7053 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=666e7bc764 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=7053 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=666e7bc764 endpointID=2330 k8sNamespace=openstack k8sPodName=glance-ks-user-9fjb6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=611d3f3d-0db3-4691-bedc-c55d98a27b3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=666e7bc764 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=7053 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-9fjb6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 ffcadced-a371-4f71-96bd-6e1083fbe11c default }" containerID=bafddf2d4c46880186628680786d26b6ca72ac0beea82867deb05161043d5c9f datapathConfiguration="&{false false false false false }" interface=lxcafbef4be0833 k8sPodName=openstack/glance-metadefs-load-w5nqk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=50162 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3285 identity=50162 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bafddf2d4c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3285 identity=50162 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bafddf2d4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3285 identity=50162 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bafddf2d4c endpointID=3285 k8sNamespace=openstack k8sPodName=glance-metadefs-load-w5nqk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7b6e9348-5a51-4f5a-b1db-1fa1300285f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bafddf2d4c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3285 identity=50162 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/glance-metadefs-load-w5nqk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 57e42060-3644-4b00-9c2b-05c4e21454eb default }" containerID=74e35284800bae3048bc092bb8045874cd59aeb621ca9d6be565df631a4176e3 datapathConfiguration="&{false false false false false }" interface=lxc5220a068a355 k8sPodName=openstack/glance-storage-init-qhkk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74e3528480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74e3528480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74e3528480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identity=6646 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74e3528480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2325 identity=6646 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74e3528480 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2325 identity=6646 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74e3528480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2325 identity=6646 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74e3528480 endpointID=2325 k8sNamespace=openstack k8sPodName=glance-storage-init-qhkk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=af0e0364-e363-4664-9d2b-32888b6a325f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=74e3528480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2325 identity=6646 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-storage-init-qhkk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 be134781-7020-4983-b4e3-af1e7afbbc16 default }" containerID=cdfad15b4da95ff16c0a0ea27099046fff1a51845e51865fdd115188f903b11c datapathConfiguration="&{false false false false false }" interface=lxcd58604d5751f k8sPodName=openstack/glance-api-89d88f796-mk7w9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdfad15b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdfad15b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdfad15b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=24285 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdfad15b4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=24285 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cdfad15b4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=224 identity=24285 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdfad15b4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=24285 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/glance-api-89d88f796-mk7w9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.14 c3033255-a066-4048-935e-39edba32cb1f default }" containerID=d582f38227058a85602a761e4c86085d4230ebfa983bf2230fc4d8dc9f86c14a datapathConfiguration="&{false false false false false }" interface=lxc5cb29ed6320f k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.239 d0bd1142-a2ee-4de3-96c7-963d123422f5 default }" containerID=d6ceaf738b203b6f9f4ed24b34407daac9e58cc3dd11e928fedbafca94b7bf1e datapathConfiguration="&{false false false false false }" interface=lxc40894e0e24db k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=916 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=550 identity=916 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=40976 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3478 identity=40976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 3bb4ad5b-09c4-494d-90a4-f7e2d3024c37 default }" containerID=429dfd3432228ec7fc78e26156a4be3a7cacbd766d9beb717571b4f89e581b7b datapathConfiguration="&{false false false false false }" interface=lxcff89991f14c6 k8sPodName=openstack/staffeln-db-init-jfjgx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=429dfd3432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=429dfd3432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=429dfd3432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=5186 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=429dfd3432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1761 identity=5186 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6ceaf738b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3478 identity=40976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6ceaf738b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3478 identity=40976 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/staffeln-conductor-5d57f9cd56-zx9tk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d582f38227 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=550 identity=916 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=d582f38227 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=550 identity=916 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/staffeln-api-685cffcbc-bjrkb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=429dfd3432 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1761 identity=5186 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=endpoint level=info msg="Successful endpoint creation" containerID=429dfd3432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=5186 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=429dfd3432 endpointID=1761 k8sNamespace=openstack k8sPodName=staffeln-db-init-jfjgx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d5efbcce-5146-446e-b4da-0044dd6e83f3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=429dfd3432 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1761 identity=5186 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/staffeln-db-init-jfjgx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 156fe136-cdf6-4ba2-9120-86100c20edfd default }" containerID=3ca5c1470d70a7151522d0ac5255936203b3c2e7f724b0bac3b92908de2fe18e datapathConfiguration="&{false false false false false }" interface=lxc9ef41453c1f8 k8sPodName=openstack/staffeln-db-sync-7grlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ca5c1470d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ca5c1470d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=3ca5c1470d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=47288 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=254cb096-3735-41bd-9bd5-ad842b1d490d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ca5c1470d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=809 identity=47288 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ca5c1470d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=809 identity=47288 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ca5c1470d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=809 identity=47288 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-7grlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager