level=info msg="Memory available for map entries (0.003% of 67421646848B): 168554117B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="859.334µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="48.791µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="896.174µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="12.191µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=99.869199ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.25µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.23µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="51.342µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="77.302µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="71.832µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="436.592µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.766509ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.37074ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="27.651µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="28.041µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="167.545µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="100.943µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="47.301µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=59.921316ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="89.942µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="12.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.52.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.684224ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="19.331µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.390332ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.850367ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="8.601µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.141µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.85µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="51.412µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="307.868µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.44µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="732.36µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.001347ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.184982ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.8µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.612µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.52 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.52 ipAddr.ipv6="" k8sNodeIP=162.253.55.52 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.52" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.77" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.52" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.52} {CiliumInternalIP 10.0.0.77}] 10.0.0.0/24 [] [] 10.0.0.29 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42639" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.644765801s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="16.52µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="112.763µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="58.642µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="14.7µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3849 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.711635471s subsys=daemon level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Compiled new BPF template" BPFCompilationTime=306.531092ms file-path=/var/run/cilium/state/templates/8bcd43e316926deaf911df63c63fbd2e07eb35d868edb98c839a7ce1b5732b48/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3849 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 ipv4=10.0.0.29 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identityLabels="reserved:health" ipv4=10.0.0.29 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2385 identity=4 identityLabels="reserved:health" ipv4=10.0.0.29 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.078800554s file-path=/var/run/cilium/state/templates/9f0a8af64db95d60e47d91569b415aee52b7f68f60f6da8dcbe32e2cff84ad2e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2385 identity=4 ipv4=10.0.0.29 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 91a1e046-22f0-415c-9866-4d9eb8bea223 default }" containerID=f70c07a272591a94654fd04c71260f8d5a35db9c26ded8985fa051e9765202e5 datapathConfiguration="&{false false false false false }" interface=lxcf10355ef56db k8sPodName=kube-system/coredns-7c96b6546b-b98nz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f70c07a272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f70c07a272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f70c07a272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=24647 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f70c07a272 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=701 identity=24647 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f70c07a272 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=701 identity=24647 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=endpoint level=info msg="Successful endpoint creation" containerID=f70c07a272 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=701 identity=24647 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 54afe5a8-ac6e-407d-b4eb-4c82c96a4d37 default }" containerID=1f3741e4fcbdd4fcded0fdb517235877d54aeb0e9457eefdd38016c4597cd07c datapathConfiguration="&{false false false false false }" interface=lxcf4204955d518 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f3741e4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f3741e4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f3741e4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=4512 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f3741e4fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=748 identity=4512 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 7c4a651c-f5a3-4d0a-a131-e581548a2c35 default }" containerID=7bbef785b720a108281d33ce1f3a40e4b8267bd6dc2820ad4c38988e2c0badbb datapathConfiguration="&{false false false false false }" interface=lxc339121caade5 k8sPodName=kube-system/coredns-67659f764b-rzqm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bbef785b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 748b0c24-81c7-4663-8d71-d16689e897ea default }" containerID=ee9762438bdd3d39d3bc8ee09e42fd07f77fb17d73769fc8367d97ea990b0521 datapathConfiguration="&{false false false false false }" interface=lxc216aa2e05ef8 k8sPodName=kube-system/coredns-67659f764b-cl7vv labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=7bbef785b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 subsys=endpoint level=info msg="New endpoint" containerID=ee9762438b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7bbef785b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=24647 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bbef785b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=24647 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee9762438b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ee9762438b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=24647 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee9762438b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=24647 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 bce8c1b4-f235-4450-b001-0de4b5b4a754 default }" containerID=c059b30427ab280f25b4996aa2a1ef62603d09a65d8caa378e875fb5d89b2558 datapathConfiguration="&{false false false false false }" interface=lxca1ed2688b5df k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.178 16dc0516-97f4-47af-b856-1da5c94d0177 default }" containerID=e3e76aa881a662db7062d13d5952a7ccb0a45331776235b62f50a0d240a7c636 datapathConfiguration="&{false false false false false }" interface=lxc66e98482c5e3 k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c059b30427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 c29e9f23-26ed-4ecd-8931-1b2dc511b47f default }" containerID=c6322b203eb87cc72adfecc6cfca63f0161712a2da9bd06a1c59affc34fa0ab6 datapathConfiguration="&{false false false false false }" interface=lxcfd4a18d84a81 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c059b30427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.183 57252770-ac59-4d39-8ba4-61c51360c393 default }" containerID=5e7635b4d52f017bf9fd5d2f3f2761f4ef1ebe38fa376441d6b9b43c1601d6ad datapathConfiguration="&{false false false false false }" interface=lxc4382f3bfd574 k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e3e76aa881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=endpoint level=info msg="New endpoint" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e3e76aa881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c059b30427 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=8816 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c059b30427 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=130 identity=8816 ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e3e76aa881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=25339 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e3e76aa881 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1460 identity=25339 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=1f3741e4fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=748 identity=4512 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f3741e4fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=748 identity=4512 ipv4=10.0.0.177 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9dtl5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ee9762438b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=26 identity=24647 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee9762438b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=24647 ipv4=10.0.0.237 ipv6= k8sPodName=kube-system/coredns-67659f764b-cl7vv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c059b30427 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=130 identity=8816 ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p subsys=endpoint level=info msg="Successful endpoint creation" containerID=c059b30427 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=130 identity=8816 ipv4=10.0.0.156 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8wv4p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7bbef785b7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=106 identity=24647 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bbef785b7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=106 identity=24647 ipv4=10.0.0.17 ipv6= k8sPodName=kube-system/coredns-67659f764b-rzqm4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e3e76aa881 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1460 identity=25339 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e3e76aa881 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1460 identity=25339 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=10202 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=10202 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=5e7635b4d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1588 identity=10202 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e7635b4d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1588 identity=10202 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-8vhxf subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=4432 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2060 identity=4432 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6322b203e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2060 identity=4432 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6322b203e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2060 identity=4432 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-r2kzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f70c07a272 endpointID=701 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-b98nz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=f70c07a272 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=701 identity=24647 ipv4=10.0.0.12 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-b98nz subsys=endpoint level=info msg="Delete endpoint request" containerID=e3e76aa881 endpointID=1460 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-r45nw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1bf9759a-4dc8-4dac-ba5b-fdb938535d56 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e3e76aa881 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1460 identity=25339 ipv4=10.0.0.178 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-r45nw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 2f620d53-6680-400e-bfb1-c7ce831332a9 default }" containerID=1ba56ae933eb4f30043aaf73884cfaf574faa5441f243f12ff693a7cab89e173 datapathConfiguration="&{false false false false false }" interface=lxc5a28dc82ec09 k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ba56ae933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ba56ae933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1ba56ae933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=50663 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ba56ae933 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1522 identity=50663 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ba56ae933 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1522 identity=50663 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ba56ae933 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1522 identity=50663 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1ba56ae933 endpointID=1522 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-798j2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=77726b67-adb6-4cbf-90ce-c623587648cb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=1ba56ae933 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1522 identity=50663 ipv4=10.0.0.210 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-798j2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 d586ad00-791b-4dcc-b907-0c7cf4961245 default }" containerID=20778ca75d6b2d1c0670a62705e80002c98367391e8e3f45c049694a929a7cd1 datapathConfiguration="&{false false false false false }" interface=lxcdcb350ccb424 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20778ca75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20778ca75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20778ca75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=6922 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20778ca75d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3056 identity=6922 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20778ca75d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3056 identity=6922 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm subsys=endpoint level=info msg="Successful endpoint creation" containerID=20778ca75d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3056 identity=6922 ipv4=10.0.0.169 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-fn7fm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 369aa767-bc5e-4391-b583-698cb6fff59e default }" containerID=bba702412b9e0917dfaa9fd2588fd22e67f9728924e01557d8634bc000736c84 datapathConfiguration="&{false false false false false }" interface=lxc4c1b0f34c0c1 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bba702412b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bba702412b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9b512048-3061-4748-9758-1cb27171d00d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=9b512048-3061-4748-9758-1cb27171d00d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9b512048-3061-4748-9758-1cb27171d00d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=9b512048-3061-4748-9758-1cb27171d00d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bba702412b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=26817 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9b512048-3061-4748-9758-1cb27171d00d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=9b512048-3061-4748-9758-1cb27171d00d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bba702412b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2606 identity=26817 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bba702412b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2606 identity=26817 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=bba702412b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2606 identity=26817 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bba702412b endpointID=2606 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-gjn5t subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9b512048-3061-4748-9758-1cb27171d00d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=9b512048-3061-4748-9758-1cb27171d00d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=bba702412b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2606 identity=26817 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gjn5t subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=6a93fb22-b997-408b-9b73-83d3581600ff] Description:}]" policyAddRequest=2a3ebae4-a674-483f-aa1c-11e82e9843e8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2a3ebae4-a674-483f-aa1c-11e82e9843e8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=86db0a2e-4eae-4916-8d03-63510e472d88] Description:}]" policyAddRequest=af258339-1b62-4cea-ab29-82112c901cac subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=af258339-1b62-4cea-ab29-82112c901cac policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 ec930c13-d678-4beb-9538-51ca993e92cc default }" containerID=12fb6d06527d7bab81a571232f51f3d6214b3e8a04d141e65c7b6e8d964fb147 datapathConfiguration="&{false false false false false }" interface=lxc7ea01374a001 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=2175 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2391 identity=2175 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=12fb6d0652 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2391 identity=2175 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=12fb6d0652 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2391 identity=2175 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-clmt9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 ba7c8f99-6cac-4853-9f0a-7615f66e84d6 default }" containerID=e98d05afbfd302150a60b69c5309042baad207290f228755113b3626109d7724 datapathConfiguration="&{false false false false false }" interface=lxccea5c837e6f4 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e98d05afbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e98d05afbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e98d05afbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=10896 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e98d05afbf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=10896 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e98d05afbf datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2326 identity=10896 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=e98d05afbf datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2326 identity=10896 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qxgqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.246 3ae28654-a95c-4764-a8d9-3c2e31b981b9 default }" containerID=d4507aceb04512fc425c878abcfd202374e5ff46476a0bea62267ddc1e63c967 datapathConfiguration="&{false false false false false }" interface=lxc44d7e8c21353 k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d4507aceb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d4507aceb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d4507aceb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=10650 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d4507aceb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=10650 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d4507aceb0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1777 identity=10650 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d4507aceb0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1777 identity=10650 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-dgvf4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 204566f4-02c2-4e87-9f33-709ee275d667 default }" containerID=3c32e22648f4ea57dbec47a58fa47dfd53d39aba357679665b1f6e3373133fa9 datapathConfiguration="&{false false false false false }" interface=lxcb57ec27cad07 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=2616 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2799 identity=2616 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c32e22648 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2799 identity=2616 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c32e22648 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2799 identity=2616 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 40e1cdf6-eec7-4a33-bb67-010250ad2d0b default }" containerID=4d861244ab1379a46b9e6511fb4b0f24c0ae17082b27252d612e43e06f8d95f0 datapathConfiguration="&{false false false false false }" interface=lxc5dea775f5bb9 k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d861244ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d861244ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d861244ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d861244ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3289 identity=58978 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d861244ab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3289 identity=58978 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d861244ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3289 identity=58978 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d861244ab endpointID=3289 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4d861244ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3289 identity=58978 ipv4=10.0.0.43 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e086c48-321c-4f96-8c2f-9120c7cd51d9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 8208f015-0202-41d6-8c4c-b2ea1394a448 default }" containerID=ffbf89284fe09070f9615846e596039a4c8b053123f5d2f506968fa7a104f2e7 datapathConfiguration="&{false false false false false }" interface=lxc31babe7740eb k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffbf89284f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffbf89284f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffbf89284f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=20114 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffbf89284f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=20114 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ffbf89284f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=7 identity=20114 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffbf89284f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=7 identity=20114 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=47507902-5984-4c8b-8fd6-7dc405fa361f] Description:}]" policyAddRequest=5500dda6-95b8-4cbf-8a20-485349409c8b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5500dda6-95b8-4cbf-8a20-485349409c8b policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.184 363ce1f4-9392-488d-b610-d52ea416fcd4 default }" containerID=038071f862e96638b7a2be755b4cd33324a97438c410b6c53ae16b7c01969233 datapathConfiguration="&{false false false false false }" interface=lxc39e43419ffc6 k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=038071f862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=038071f862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=038071f862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=038071f862 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=58978 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=038071f862 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=642 identity=58978 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=038071f862 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=642 identity=58978 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=daemon level=info msg="Delete endpoint request" containerID=038071f862 endpointID=642 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=038071f862 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=642 identity=58978 ipv4=10.0.0.184 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9683e3c3-404c-480a-9275-f4282a4c74b6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 17d33168-e012-4039-8e19-c863b28e4a3b default }" containerID=72c7670f2cd75971613dbb209e1f6f772736fb34c3a3cb255bc09032ac0f6fca datapathConfiguration="&{false false false false false }" interface=lxc10ad9d1ccae3 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=9283 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=9283 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72c7670f2c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=753 identity=9283 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72c7670f2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=753 identity=9283 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=7c58f960-9f53-4a97-97cd-e086ed545c57] Description:}]" policyAddRequest=df6c3014-0b5d-4e60-8413-67f2ccbd5add subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=df6c3014-0b5d-4e60-8413-67f2ccbd5add policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 806bb09b-65a0-48ea-bc41-32459e1cde65 default }" containerID=70df08dac18e34661fb8ab73ef4054bf9212b9b24a52f1da2c5b1d82c585ee6d datapathConfiguration="&{false false false false false }" interface=lxcb7e87eb26596 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=70df08dac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=70df08dac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=70df08dac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=41215 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=70df08dac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=27 identity=41215 ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=70df08dac1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=27 identity=41215 ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=70df08dac1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=27 identity=41215 ipv4=10.0.0.65 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.01065578205527074 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.16 7c2e07de-cc70-462c-9525-5fc35ced88ed default }" containerID=4b896d52c16913d68b73855a0d907a24bbadb4079694884a31fc5b0152a0cdc6 datapathConfiguration="&{false false false false false }" interface=lxcbac739e7d3b3 k8sPodName=monitoring/node-feature-discovery-worker-mjszn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b896d52c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b896d52c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b896d52c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=29019 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4b896d52c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=29019 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 2f539389-c7bf-497c-8778-db72612ba164 default }" containerID=ad20d62d64b9980cf075877f5e87d77a79285fee8bf6fcab1d5833867eeab08f datapathConfiguration="&{false false false false false }" interface=lxcd1349ecaceea k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad20d62d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad20d62d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad20d62d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=327 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad20d62d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=263 identity=327 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b896d52c1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=77 identity=29019 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b896d52c1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=77 identity=29019 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-mjszn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.198 74ac86fc-d5f3-4e02-8895-0012d065e347 default }" containerID=f773b50dcf62485081108737c2a17f85514cfa442f99989bbc2830257552720a datapathConfiguration="&{false false false false false }" interface=lxcbc9fa18d7456 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f773b50dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f773b50dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f773b50dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=22833 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f773b50dcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=865 identity=22833 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad20d62d64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=263 identity=327 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad20d62d64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=263 identity=327 ipv4=10.0.0.102 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-rtxnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f773b50dcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=865 identity=22833 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f773b50dcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=865 identity=22833 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5gj44 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 248c209b-c1b9-4c86-9a6f-58669e1597c3 default }" containerID=11a55fdeb4404c7c8f6441dcf4bdd28b9816fea4c1336da501891c817c2e5631 datapathConfiguration="&{false false false false false }" interface=lxc19c14d51bcc0 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11a55fdeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11a55fdeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11a55fdeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=59016 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11a55fdeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=59016 ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11a55fdeb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=673 identity=59016 ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11a55fdeb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=673 identity=59016 ipv4=10.0.0.86 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-2tlq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3849 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03849 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03849 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03849 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03849:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3849 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 9cebb81b-4d63-401d-a151-924d3056d0af default }" containerID=16d13bd46cbce1fd2997b265c2c86dce16971a5b47bdede9cc0c4c7290e073e3 datapathConfiguration="&{false false false false false }" interface=lxc97879c91205a k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16d13bd46c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16d13bd46c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=16d13bd46c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=51461 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16d13bd46c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=15 identity=51461 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16d13bd46c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=15 identity=51461 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16d13bd46c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=51461 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=16d13bd46c endpointID=15 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-vrqs6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=80bad4ff-87b2-439c-81af-a5a9242bcfee k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=16d13bd46c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=15 identity=51461 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-vrqs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 63758d04-c86f-4a07-bbee-172839f4183d default }" containerID=176600b52e0a8127d65ce323919c0c26be8cc31c01d5d30433a4f7a8d1c19386 datapathConfiguration="&{false false false false false }" interface=lxc053c3e9fc93d k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=176600b52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=176600b52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=176600b52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=13955 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=176600b52e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1465 identity=13955 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.247 85ac3b94-4d29-43aa-b315-b6b21664f402 default }" containerID=02e06d01b68107710e40cb6a2398f116c4985f090764e375e0d16b3fd51aa50c datapathConfiguration="&{false false false false false }" interface=lxc9d56d7e549e7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02e06d01b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02e06d01b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02e06d01b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=278 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02e06d01b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=411 identity=278 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=176600b52e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1465 identity=13955 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=176600b52e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1465 identity=13955 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-v4k9x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02e06d01b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=411 identity=278 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=02e06d01b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=411 identity=278 ipv4=10.0.0.247 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-cwg7l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 8e2a0c95-9acb-4402-9da5-ce393320e56a default }" containerID=6cd788b450f050b73644e7ee234a4c14ba97aaf511991be146db5ed954c38b4f datapathConfiguration="&{false false false false false }" interface=lxc0949adba43e6 k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cd788b450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cd788b450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cd788b450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=63649 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cd788b450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1222 identity=63649 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cd788b450 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1222 identity=63649 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cd788b450 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1222 identity=63649 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6db57795cb-g74x5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 a40716c8-62b9-496e-9c61-bb8d8f69318b default }" containerID=6304250d8b0236e1c47d0d33a9f4a4ba7a25ab0bc0ca4c76d7bdec1eb81fd8ea datapathConfiguration="&{false false false false false }" interface=lxc1b44bb74d25e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6304250d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6304250d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6304250d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=25085 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6304250d8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=25085 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6304250d8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3398 identity=25085 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6304250d8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3398 identity=25085 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.95 0c8bfab6-b6c3-4d6b-960d-43c22a699c54 default }" containerID=d5ffe840e0231948c93c1462bdae75ae9d439a959c26d2efccdee0f0613e0ed0 datapathConfiguration="&{false false false false false }" interface=lxc421421f3e276 k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5ffe840e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5ffe840e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5ffe840e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5ffe840e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2212 identity=58978 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5ffe840e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2212 identity=58978 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5ffe840e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=58978 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 c5462bde-8b77-4a60-bb72-c2c2a7f78f33 default }" containerID=a187d1133ab5920082c3cf389461ab2788f6c94a1b09bf3275008f6a3297a95d datapathConfiguration="&{false false false false false }" interface=lxc2c4ee932aeea k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a187d1133a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a187d1133a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a187d1133a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a187d1133a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=58978 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a187d1133a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=650 identity=58978 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=endpoint level=info msg="Successful endpoint creation" containerID=a187d1133a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=58978 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=daemon level=info msg="Delete endpoint request" containerID=6304250d8b endpointID=3398 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-fqfl8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c91e77f9-7ef0-44c1-8827-b36a225cf9a0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6304250d8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3398 identity=25085 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fqfl8 subsys=endpoint level=info msg="Delete endpoint request" containerID=d5ffe840e0 endpointID=2212 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=a187d1133a endpointID=650 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d5ffe840e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2212 identity=58978 ipv4=10.0.0.95 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-15be53e1-88d9-49bd-81d9-c86e6c193769 subsys=endpoint level=info msg="Removed endpoint" containerID=a187d1133a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=58978 ipv4=10.0.0.197 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-351b86be-c453-4169-bae9-6f28b673db0c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 71e3309a-7aa5-4a0f-96a3-6fdc01792768 default }" containerID=a5a836579047f8b151ad63b8d01ef6a4173362da8f967a15931cd181e9fb1288 datapathConfiguration="&{false false false false false }" interface=lxcbfbcf23f5574 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5a8365790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5a8365790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5a8365790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=31224 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5a8365790 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=31224 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a5a8365790 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1497 identity=31224 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5a8365790 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=31224 ipv4=10.0.0.10 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 440445e4-8c17-4950-ab99-ef4e8eaef47c default }" containerID=061b2bece0a1fb1b33fad647d752ea2e45902655a1680837b5e96328311a3fee datapathConfiguration="&{false false false false false }" interface=lxcde3e22719965 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=061b2bece0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=061b2bece0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=061b2bece0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=53415 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=061b2bece0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1515 identity=53415 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=061b2bece0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1515 identity=53415 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=061b2bece0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1515 identity=53415 ipv4=10.0.0.185 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 8183597b-d017-4b9a-8993-3d2b65985a9a default }" containerID=4e55839b57eda14f85fc4dcea45b4fa3e6ba968bab3fce9cb7e563b3798adefd datapathConfiguration="&{false false false false false }" interface=lxcc3af965bad4f k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e55839b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e55839b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e55839b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identity=57586 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e55839b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3965 identity=57586 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 4dce2c17-1386-4070-9db6-c1168093d8de default }" containerID=6a06e6323832368709e979bbab34f87536c104bedccf5996c275dcf214519026 datapathConfiguration="&{false false false false false }" interface=lxce7d5a5c67dcc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a06e63238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a06e63238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.141 6cb9ecb4-b2aa-4e74-acfc-5dcda07a5b19 default }" containerID=d8c18c77548a3ecfff2d56cf3adb2caf5b5c54323ac28ce138a50e015b01f351 datapathConfiguration="&{false false false false false }" interface=lxc7125b523aaf4 k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8c18c7754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8c18c7754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a06e63238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identity=29151 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a06e63238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3643 identity=29151 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8c18c7754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8c18c7754 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2770 identity=58978 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e55839b57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3965 identity=57586 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e55839b57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3965 identity=57586 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-q8tw9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 77ffd04b-730d-4d2b-b84e-5daf7cdc32b3 default }" containerID=6fcf2b140d27a1901cde8e786ab0784524cf413b3d1fadea5b908a0a58732c34 datapathConfiguration="&{false false false false false }" interface=lxcef68c2c93e13 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fcf2b140d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fcf2b140d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fcf2b140d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=28473 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fcf2b140d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=28473 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a06e63238 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3643 identity=29151 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a06e63238 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3643 identity=29151 ipv4=10.0.0.145 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6fcf2b140d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=117 identity=28473 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fcf2b140d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=117 identity=28473 ipv4=10.0.0.171 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d8c18c7754 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2770 identity=58978 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8c18c7754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=58978 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 19d7ab1e-e5ac-4f5d-b827-1c777797f102 default }" containerID=96d8b0fbb851a5d12d64e81dc283e1f93bf1f9ea6d0da9f96880687be19d23f5 datapathConfiguration="&{false false false false false }" interface=lxc757a80cb0c57 k8sPodName=monitoring/vector-krdwx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96d8b0fbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96d8b0fbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96d8b0fbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=1693 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96d8b0fbb8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3101 identity=1693 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96d8b0fbb8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3101 identity=1693 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx subsys=endpoint level=info msg="Successful endpoint creation" containerID=96d8b0fbb8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3101 identity=1693 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/vector-krdwx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d8c18c7754 endpointID=2770 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d8c18c7754 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2770 identity=58978 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-87be3e27-114f-4eba-b0a8-df88c3326520 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 32ce59c8-1481-406e-a906-3d36e6d10f52 default }" containerID=bbcdf8e4e3ffbc039f959f024564ba83e8af487bb984bbde2ced52f1b2783e04 datapathConfiguration="&{false false false false false }" interface=lxcd98fd80d574b k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbcdf8e4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbcdf8e4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbcdf8e4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=432 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbcdf8e4e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=432 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbcdf8e4e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=52 identity=432 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbcdf8e4e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=52 identity=432 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 9f3fdd69-8f31-41b8-8e6c-245b0810d3b5 default }" containerID=37e6d37bc16254bea01952e353f55bab6605c2734f6721a1d28098f1e7ebf38a datapathConfiguration="&{false false false false false }" interface=lxce604705de2f8 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=11252 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=11252 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37e6d37bc1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=11252 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=37e6d37bc1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=11252 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bzzvk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.203 21963a43-68cf-4c33-ac56-b67d629e3282 default }" containerID=33a65760d4c0487a9aa0777d0dc6459ceffbaacc7ae0179deef6e47c22b2a474 datapathConfiguration="&{false false false false false }" interface=lxcf532b1de77f5 k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33a65760d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33a65760d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33a65760d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=11932 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33a65760d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=156 identity=11932 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33a65760d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=156 identity=11932 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=33a65760d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=156 identity=11932 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-ccqj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 f189d9bd-97df-498c-9323-b1aca5e70261 default }" containerID=885eef98ab26394438af2228eacb24c64150960419d61fbaf393eca087f1cb33 datapathConfiguration="&{false false false false false }" interface=lxcd5a41068c114 k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=885eef98ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=885eef98ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=885eef98ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=885eef98ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=58978 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=885eef98ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3740 identity=58978 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=885eef98ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3740 identity=58978 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=daemon level=info msg="Delete endpoint request" containerID=885eef98ab endpointID=3740 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=885eef98ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3740 identity=58978 ipv4=10.0.0.232 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cff5e1ce-6b47-4566-86c9-b40eabca4ce1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 3915365e-48dd-4f55-82d9-e130f1d05c90 default }" containerID=7efa556bed64fb82c9aea7526eee41b53374afcbf78c5ff53a62aa748fcf232a datapathConfiguration="&{false false false false false }" interface=lxcea4114688cb3 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7efa556bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7efa556bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7efa556bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=36930 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7efa556bed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=36930 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7efa556bed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=772 identity=36930 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7efa556bed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=772 identity=36930 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 988e2d15-59cc-4386-ae25-6e3578c5a469 default }" containerID=c011f4f223d0da18b52cbd2ba0c3f0c08d56d81b7ccbdb795d89418f4492eb2a datapathConfiguration="&{false false false false false }" interface=lxc2e4c9c274de3 k8sPodName=openstack/keystone-credential-setup-85rhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c011f4f223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c011f4f223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c011f4f223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=27388 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c011f4f223 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1474 identity=27388 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c011f4f223 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1474 identity=27388 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c011f4f223 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=27388 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 7d25b754-6fc8-459c-9515-a7de3f691f7b default }" containerID=63277fccb3644ee2fc3da4b24925827731e64c23dbbe52750d8dd55d4641f662 datapathConfiguration="&{false false false false false }" interface=lxcfe0ceabd97a6 k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63277fccb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63277fccb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63277fccb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=16126 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63277fccb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=16126 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63277fccb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2737 identity=16126 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63277fccb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=16126 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-api-7ff68b88bc-8lbh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c011f4f223 endpointID=1474 k8sNamespace=openstack k8sPodName=keystone-credential-setup-85rhz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=258e2932-e470-4fb5-a3e0-cc4501c356c6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c011f4f223 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1474 identity=27388 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/keystone-credential-setup-85rhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.88 8b9d41fa-699e-4701-9130-a195934c597d default }" containerID=085cec0e08ac816b99a532ffa2be1acd13ae6ecfb8f6329b733ddc3041edaf80 datapathConfiguration="&{false false false false false }" interface=lxca8335d9d0ebe k8sPodName=openstack/keystone-db-init-ss866 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=085cec0e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=085cec0e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=085cec0e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=11274 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=085cec0e08 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=688 identity=11274 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=085cec0e08 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=688 identity=11274 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=endpoint level=info msg="Successful endpoint creation" containerID=085cec0e08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=11274 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=085cec0e08 endpointID=688 k8sNamespace=openstack k8sPodName=keystone-db-init-ss866 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=88a3723e-2bea-423b-80ec-bfc37ecad311 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=085cec0e08 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=688 identity=11274 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/keystone-db-init-ss866 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 cfc0b4d3-29b7-45d0-9102-9d3200647bbf default }" containerID=4abfc5bcc4b410dd538cf17f72599789850ab8e818d119db6d9665dac8fd3989 datapathConfiguration="&{false false false false false }" interface=lxca44a301f3808 k8sPodName=openstack/keystone-fernet-setup-fnjwp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4abfc5bcc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4abfc5bcc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a146d885-e44d-426a-bfe1-85e001642dec,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a146d885-e44d-426a-bfe1-85e001642dec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a146d885-e44d-426a-bfe1-85e001642dec;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=a146d885-e44d-426a-bfe1-85e001642dec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4abfc5bcc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=18005 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a146d885-e44d-426a-bfe1-85e001642dec,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=a146d885-e44d-426a-bfe1-85e001642dec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4abfc5bcc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2570 identity=18005 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4abfc5bcc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2570 identity=18005 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4abfc5bcc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=18005 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=daemon level=info msg="Delete endpoint request" containerID=4abfc5bcc4 endpointID=2570 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-fnjwp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a146d885-e44d-426a-bfe1-85e001642dec k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=a146d885-e44d-426a-bfe1-85e001642dec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4abfc5bcc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2570 identity=18005 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/keystone-fernet-setup-fnjwp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 5e519e5a-f092-4bdc-b3d4-eda7613e67e5 default }" containerID=ca10e2dd729a9d19f9a55cab53842bd6bedc65cdd91493ce305fda928f5ba4c0 datapathConfiguration="&{false false false false false }" interface=lxc1c3ad39e6ba7 k8sPodName=openstack/keystone-db-sync-n2wh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=5602 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=846 identity=5602 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca10e2dd72 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=846 identity=5602 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca10e2dd72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=846 identity=5602 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca10e2dd72 endpointID=846 k8sNamespace=openstack k8sPodName=keystone-db-sync-n2wh5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=94a99a0e-c197-4f16-b3d4-898d2078c87d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ca10e2dd72 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=846 identity=5602 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-db-sync-n2wh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 748ec30b-6eed-4f2d-ac94-d572b4605d6d default }" containerID=01dbbddbc03ad9b48036abaca6b852323331d7cd34942cd975cc65294508bd88 datapathConfiguration="&{false false false false false }" interface=lxc22154bdb9e40 k8sPodName=openstack/keystone-rabbit-init-qp428 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=36125 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2826 identity=36125 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01dbbddbc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2826 identity=36125 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=endpoint level=info msg="Successful endpoint creation" containerID=01dbbddbc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=36125 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=01dbbddbc0 endpointID=2826 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-qp428 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=419eb37e-9b79-4649-aa25-8b8e1a7a5f13 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=01dbbddbc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2826 identity=36125 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/keystone-rabbit-init-qp428 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 8629c091-a344-4ab1-b43c-e01f40f311cf default }" containerID=a716e9e2ced4dbcf7ae65320438c45dfe3e618035484cb8d88d24c551757d8d4 datapathConfiguration="&{false false false false false }" interface=lxce0da961d450e k8sPodName=openstack/keystone-domain-manage-rqk9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=35902 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1117 identity=35902 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a716e9e2ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1117 identity=35902 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=a716e9e2ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=35902 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a716e9e2ce endpointID=1117 k8sNamespace=openstack k8sPodName=keystone-domain-manage-rqk9m subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b031b055-b908-4bed-b29c-e024aa5a78ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a716e9e2ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1117 identity=35902 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/keystone-domain-manage-rqk9m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 aff7c70c-1e64-46bb-804f-bbefe70f7424 default }" containerID=5de2ccaecb1200386dde7cdc67a5c9dc40a5d20e2f4574b9e5f8a869c38eb0e3 datapathConfiguration="&{false false false false false }" interface=lxc0de12eb43b72 k8sPodName=openstack/keystone-bootstrap-rr97g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=5679 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=693 identity=5679 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5de2ccaecb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=693 identity=5679 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=endpoint level=info msg="Successful endpoint creation" containerID=5de2ccaecb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=693 identity=5679 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5de2ccaecb endpointID=693 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rr97g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=565d56c5-2858-4965-99e2-62ba29a1f4a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5de2ccaecb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=693 identity=5679 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-rr97g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 6c681fe4-7fba-4050-ac04-25a40d7dbe48 default }" containerID=3556c18ffd48474f6e08136c88c235c54840dcf3b5e210db4ac0b0b9f1d5940e datapathConfiguration="&{false false false false false }" interface=lxc3cbef34fbbda k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3556c18ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3556c18ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3556c18ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3556c18ffd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2951 identity=58978 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3556c18ffd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2951 identity=58978 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3556c18ffd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2951 identity=58978 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=daemon level=info msg="Delete endpoint request" containerID=3556c18ffd endpointID=2951 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3556c18ffd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2951 identity=58978 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b840273d-34fe-4cc6-ae22-242ebcea1c5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 4720d32f-a5c2-47c3-ad09-db7c474bde51 default }" containerID=d82dfc3197c89bf53515e885cc7e4470d842410cbe6764b9de4b546196f04b2a datapathConfiguration="&{false false false false false }" interface=lxcdf253e4a7135 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d82dfc3197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d82dfc3197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d82dfc3197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=9206 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d82dfc3197 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=796 identity=9206 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d82dfc3197 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=796 identity=9206 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d82dfc3197 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=796 identity=9206 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 4d7ed8d4-aab9-475c-a702-2bd30f6a1ecf default }" containerID=fcbbbf86273ff237776f04f246d2068075adfb0037ea8b41b989f9ab21153661 datapathConfiguration="&{false false false false false }" interface=lxc27bb3ecceba2 k8sPodName=openstack/barbican-api-67b8fc6448-8w92d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=6394 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=991 identity=6394 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 280c3821-dd03-46f1-a944-33b4f09589fa default }" containerID=b38f2beedc0bde64db5f7f3df7e67c29e6a97b3d7704c770b9869ce4e52248b5 datapathConfiguration="&{false false false false false }" interface=lxcfd674e1e57d4 k8sPodName=openstack/barbican-db-init-mfmg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b38f2beedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b38f2beedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b38f2beedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=45980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b38f2beedc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=45980 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fcbbbf8627 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=991 identity=6394 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d subsys=endpoint level=info msg="Successful endpoint creation" containerID=fcbbbf8627 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=991 identity=6394 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/barbican-api-67b8fc6448-8w92d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b38f2beedc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2065 identity=45980 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b38f2beedc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=45980 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b38f2beedc endpointID=2065 k8sNamespace=openstack k8sPodName=barbican-db-init-mfmg6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1fddb040-d07b-41b0-8ef1-e3c99b6e9778 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b38f2beedc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=45980 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-db-init-mfmg6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 3f3f59cc-e8c3-49bf-b54b-8af0826cd2a3 default }" containerID=3f59175ea0f564c2a21ca993b1e924bd92a426dc66a4702c77591e8ad4f85825 datapathConfiguration="&{false false false false false }" interface=lxcfad09e901a10 k8sPodName=openstack/barbican-db-sync-n9tnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f59175ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f59175ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f59175ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=46618 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f59175ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2113 identity=46618 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f59175ea0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2113 identity=46618 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f59175ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=46618 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3f59175ea0 endpointID=2113 k8sNamespace=openstack k8sPodName=barbican-db-sync-n9tnd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=eb8d2148-13cb-4cde-ad20-b371bcf7d5e0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3f59175ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2113 identity=46618 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/barbican-db-sync-n9tnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 4e5d290e-47ca-478e-8a19-38d9330dabfd default }" containerID=79e13e064a2d0eb0d2d185014a6a4593092849d1ee3f98c7a50c0ff80ed22c82 datapathConfiguration="&{false false false false false }" interface=lxc26b43a610e36 k8sPodName=openstack/barbican-rabbit-init-wvpv5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=44139 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=44139 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79e13e064a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=44139 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79e13e064a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=44139 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79e13e064a endpointID=613 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-wvpv5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b7ea0bfd-42f0-4778-a412-801b4dc2990e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=79e13e064a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=44139 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-rabbit-init-wvpv5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 fbfa5b96-3c30-4c42-8b5d-3e8c0c66581c default }" containerID=311d1030618edcd85d4db465d64e1abceb3b1cdb1dbcf0048a717b312c7cb390 datapathConfiguration="&{false false false false false }" interface=lxc848a56de2032 k8sPodName=openstack/barbican-ks-service-vlqx5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=311d103061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2574 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=311d103061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2574 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c188026-33c6-414d-9f69-e3271d263780,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c188026-33c6-414d-9f69-e3271d263780,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0c188026-33c6-414d-9f69-e3271d263780;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=0c188026-33c6-414d-9f69-e3271d263780;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=311d103061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2574 identity=7904 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c188026-33c6-414d-9f69-e3271d263780,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=0c188026-33c6-414d-9f69-e3271d263780,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=311d103061 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2574 identity=7904 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=311d103061 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2574 identity=7904 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=311d103061 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2574 identity=7904 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036383865164283685 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=311d103061 endpointID=2574 k8sNamespace=openstack k8sPodName=barbican-ks-service-vlqx5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0c188026-33c6-414d-9f69-e3271d263780 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=0c188026-33c6-414d-9f69-e3271d263780 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=311d103061 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2574 identity=7904 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/barbican-ks-service-vlqx5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 d44762d7-9f63-4b1c-89c1-5d72c8562f15 default }" containerID=941d4ce66193366003de9b70e1cb55493db42d7ce47ba704facde141ddea8833 datapathConfiguration="&{false false false false false }" interface=lxc235183b45785 k8sPodName=openstack/barbican-ks-endpoints-pfrbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=941d4ce661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=941d4ce661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=941d4ce661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=12775 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=941d4ce661 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=12775 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=941d4ce661 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=816 identity=12775 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=941d4ce661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=816 identity=12775 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=941d4ce661 endpointID=816 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-pfrbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=936f7868-4471-4869-93f6-3cd994d40ad9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=941d4ce661 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=816 identity=12775 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/barbican-ks-endpoints-pfrbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 f9c0e470-61a9-4765-9233-857df2245eae default }" containerID=0310e803723db53186c94cebf9caf812be01b66e572dc4f8f182e4a9944f1d5d datapathConfiguration="&{false false false false false }" interface=lxcb35ffd9a0694 k8sPodName=openstack/barbican-ks-user-cxj4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0310e80372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0310e80372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0310e80372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identity=35499 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0310e80372 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2813 identity=35499 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0310e80372 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2813 identity=35499 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=0310e80372 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2813 identity=35499 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=daemon level=info msg="Delete endpoint request" containerID=0310e80372 endpointID=2813 k8sNamespace=openstack k8sPodName=barbican-ks-user-cxj4j subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=99f24d08-0fb7-440a-aaee-7468d9801476 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0310e80372 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2813 identity=35499 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/barbican-ks-user-cxj4j subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.208 48d02987-4b6b-4c8b-b120-4733908a3899 default }" containerID=f925fd73e05dcb2eb893bab36a52d1388fe987c3b206a89c67d003cc998592eb datapathConfiguration="&{false false false false false }" interface=lxc829aadf12386 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=33944 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2907 identity=33944 ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f925fd73e0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2907 identity=33944 ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=f925fd73e0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2907 identity=33944 ipv4=10.0.0.208 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-n4vdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 4b41cc1e-095e-4796-a382-670fc1bdb66c default }" containerID=56e3159a9d09974499d422809320f6ecbdb930726f4bc2423b60cec38c3cd19d datapathConfiguration="&{false false false false false }" interface=lxcb415f8570dcc k8sPodName=openstack/rook-ceph-detect-version-5fwl7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=56e3159a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=56e3159a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=56e3159a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=24688 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=56e3159a9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=24688 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=56e3159a9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2075 identity=24688 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=56e3159a9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=24688 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=56e3159a9d endpointID=2075 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-5fwl7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=bf6c16aa-f5fd-4a35-835f-bcef6598ed80 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=56e3159a9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=24688 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5fwl7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 dc30e80b-a528-4c05-a09b-613d70fa1a6e default }" containerID=74754d69ba62d9ae7f455772360b63b045547696d313fd61c96bf4284e7b2828 datapathConfiguration="&{false false false false false }" interface=lxce7235a20cfa9 k8sPodName=openstack/ceph-object-controller-detect-version-286lw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=925 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3197 identity=925 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74754d69ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3197 identity=925 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=endpoint level=info msg="Successful endpoint creation" containerID=74754d69ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3197 identity=925 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74754d69ba endpointID=3197 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-286lw subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=fd8fd831-0bad-4895-9b11-4fe21cc59226 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=74754d69ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3197 identity=925 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-286lw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 d6e32dd6-632f-45db-98ac-3dc979f2f074 default }" containerID=3ddafda1295732c7062418b3fe562735e703e6b6006eaa3396f372623e5f242b datapathConfiguration="&{false false false false false }" interface=lxc3af21d7c67a0 k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ddafda129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ddafda129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ddafda129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=58978 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ddafda129 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=58978 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ddafda129 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=58978 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ddafda129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=58978 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=daemon level=info msg="Delete endpoint request" containerID=3ddafda129 endpointID=45 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3ddafda129 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=58978 ipv4=10.0.0.35 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e84168c9-a87f-4bbb-b053-94a926683fe0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 0d7603eb-9881-457d-bec8-b0c34fe2c77b default }" containerID=391c4b9e8969c7faa19f9848b405f2161a0c942fddea156701d90ef1023071d1 datapathConfiguration="&{false false false false false }" interface=lxc36fc056e1213 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=391c4b9e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3032 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=391c4b9e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3032 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=391c4b9e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3032 identity=7844 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=391c4b9e89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3032 identity=7844 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=391c4b9e89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3032 identity=7844 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=391c4b9e89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3032 identity=7844 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 81b4710a-53be-4115-96b4-b32f33307b90 default }" containerID=7231e31cfef904a168d1c72eef66ab9923a444422f7c4fbdd1590cf4997d43a3 datapathConfiguration="&{false false false false false }" interface=lxcf279b393e3c7 k8sPodName=openstack/glance-db-init-r4nkd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7231e31cfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7231e31cfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7231e31cfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=37059 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7231e31cfe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=196 identity=37059 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7231e31cfe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=196 identity=37059 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7231e31cfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=37059 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7231e31cfe endpointID=196 k8sNamespace=openstack k8sPodName=glance-db-init-r4nkd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=311e9154-1c7f-41a7-ad81-f0bf3d3fb361 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7231e31cfe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=196 identity=37059 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-init-r4nkd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 93f0526e-d2fd-42c2-ab3a-8aacea7f7842 default }" containerID=4194ca3023fe9675f20f338c179f9c48e609c0460ab6edc74a6f8b6789b1d33d datapathConfiguration="&{false false false false false }" interface=lxc83b4390536d4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4194ca3023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4194ca3023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4194ca3023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identity=12499 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4194ca3023 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3721 identity=12499 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.22 1b51ea2c-947a-4190-8157-a5f8a199b091 default }" containerID=790a9237a79681fd9edade760c0bd1d653c07b16c0d3a4b7448333be31128713 datapathConfiguration="&{false false false false false }" interface=lxccd90772606a2 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=790a9237a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=790a9237a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=790a9237a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=4073 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=790a9237a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=4073 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4194ca3023 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3721 identity=12499 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz subsys=endpoint level=info msg="Successful endpoint creation" containerID=4194ca3023 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3721 identity=12499 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-xqmdz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=790a9237a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=204 identity=4073 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=790a9237a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=204 identity=4073 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9cs5l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 17398f80-dc10-45a0-912d-1ef5c535edda default }" containerID=0f8e210e0c53e60909c0dbfccc37858bd27120c5af863fe8e24795174f9d0bcb datapathConfiguration="&{false false false false false }" interface=lxc4e3ffb9a99e6 k8sPodName=openstack/glance-db-sync-rth5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f8e210e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f8e210e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f8e210e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=23937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f8e210e0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1574 identity=23937 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f8e210e0c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1574 identity=23937 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f8e210e0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=23937 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f8e210e0c endpointID=1574 k8sNamespace=openstack k8sPodName=glance-db-sync-rth5f subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=11264089-d282-4ba5-9340-dcd29afe71e7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0f8e210e0c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1574 identity=23937 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-db-sync-rth5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 5574094d-ff8b-4c0d-8b30-46cf62769555 default }" containerID=109440ed44e63ac8ac7c07fb500e06a91622570c4113414da965d86f2d82c30b datapathConfiguration="&{false false false false false }" interface=lxcf88f79060193 k8sPodName=openstack/glance-rabbit-init-wws92 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=20606 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=20606 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=109440ed44 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1945 identity=20606 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=endpoint level=info msg="Successful endpoint creation" containerID=109440ed44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=20606 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=109440ed44 endpointID=1945 k8sNamespace=openstack k8sPodName=glance-rabbit-init-wws92 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=52fedb07-953c-4ddf-b1a6-5f669e99983e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=109440ed44 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=20606 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/glance-rabbit-init-wws92 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 50564aa9-0f02-440a-834f-99eb0122b546 default }" containerID=fd271a07d43107598f91c31bccadc3905a8e7958f61c8bef2a290ab35a567cce datapathConfiguration="&{false false false false false }" interface=lxc2d91d1bdccae k8sPodName=openstack/glance-ks-service-l5wj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd271a07d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd271a07d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd271a07d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=45106 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fd271a07d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3069 identity=45106 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd271a07d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3069 identity=45106 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd271a07d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=45106 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd271a07d4 endpointID=3069 k8sNamespace=openstack k8sPodName=glance-ks-service-l5wj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9d5154a1-3a2c-43e3-a2d3-ec290a015945 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fd271a07d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3069 identity=45106 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/glance-ks-service-l5wj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 b2b13bba-560e-4993-ae61-996b6a89e52b default }" containerID=1a2abf17bb771ece11ec65b9481ce432da250e0d7851fe9ae4c5e6cb91060a70 datapathConfiguration="&{false false false false false }" interface=lxc3ea69df0b99c k8sPodName=openstack/glance-ks-endpoints-czjj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a2abf17bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a2abf17bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a2abf17bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=3741 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a2abf17bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=3741 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a2abf17bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=770 identity=3741 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a2abf17bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=3741 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=daemon level=info msg="Delete endpoint request" containerID=1a2abf17bb endpointID=770 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-czjj6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6be298bf-06e2-4218-b0c2-d5c741e342e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1a2abf17bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=3741 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-czjj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 badbb257-a5ca-4496-8a37-117c25efe1f8 default }" containerID=b7e06d27940ccb0288a9234a66df6425832949e365508f4a2afe0e9a7d1bc68d datapathConfiguration="&{false false false false false }" interface=lxca2a51c1e9957 k8sPodName=openstack/glance-ks-user-ztkng labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7e06d2794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7e06d2794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7e06d2794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=49903 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7e06d2794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=49903 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7e06d2794 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1889 identity=49903 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7e06d2794 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1889 identity=49903 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7e06d2794 endpointID=1889 k8sNamespace=openstack k8sPodName=glance-ks-user-ztkng subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=d67c7be7-00fe-4d88-a841-2106c86c9f1f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b7e06d2794 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1889 identity=49903 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-ks-user-ztkng subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 cbaa716a-2ef4-4bb6-97e2-197c3c683acf default }" containerID=4a49e95655fd0866de57ae2d82d7b494d543200e5ce8cdddaa643ccecb7c57df datapathConfiguration="&{false false false false false }" interface=lxc98aa35a2580b k8sPodName=openstack/glance-metadefs-load-fnmpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a49e95655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a49e95655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4a49e95655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=19178 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a49e95655 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=19178 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a49e95655 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=249 identity=19178 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a49e95655 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=19178 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a49e95655 endpointID=249 k8sNamespace=openstack k8sPodName=glance-metadefs-load-fnmpd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=65e2f266-5f4b-48c2-b56b-730e6f058f48 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4a49e95655 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=249 identity=19178 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-metadefs-load-fnmpd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 88a06b1f-bad6-4df9-ae59-26ea8db0809c default }" containerID=260c70566ca64a489975c7f6e7cd33e2341d5e8fcaf3c86564cb7376cb7cc279 datapathConfiguration="&{false false false false false }" interface=lxc8226d3f97134 k8sPodName=openstack/glance-storage-init-7dtjl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=260c70566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=260c70566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=260c70566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=34752 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=260c70566c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=34752 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=260c70566c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=222 identity=34752 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=endpoint level=info msg="Successful endpoint creation" containerID=260c70566c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=34752 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=daemon level=info msg="Delete endpoint request" containerID=260c70566c endpointID=222 k8sNamespace=openstack k8sPodName=glance-storage-init-7dtjl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=8a52fdc7-919f-448f-b99a-b207315a1101 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=260c70566c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=222 identity=34752 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-7dtjl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 195e4dff-47cb-4760-b9b7-42ba915ab000 default }" containerID=c419361d4983711d2e380fa3111ff3c716efae16c4367f7994184fe9269baf48 datapathConfiguration="&{false false false false false }" interface=lxc26276611d4c5 k8sPodName=openstack/glance-api-8cd54d964-m6qt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=19176 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2078 identity=19176 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c419361d49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2078 identity=19176 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c419361d49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2078 identity=19176 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/glance-api-8cd54d964-m6qt2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.254 da51f892-7a6e-495a-bf6c-9d3a7f0ee419 default }" containerID=b3a175872f90a0d258504fd3580045e7fc392d6d73bbc972ca25ec9d356feb11 datapathConfiguration="&{false false false false false }" interface=lxc7d1b859379e5 k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3a175872f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3a175872f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.25 c07b69b3-e10f-4b48-ad53-d1b36332cbef default }" containerID=48bdc1873563d2eafc1658bb524bf0a84bab53a48d16cd989f0a325ada19c4df datapathConfiguration="&{false false false false false }" interface=lxc0b2af7b8ef93 k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3a175872f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=17673 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=b3a175872f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=651 identity=17673 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=17980 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=382 identity=17980 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 b9660c8d-c783-4784-8828-3647d3ba0065 default }" containerID=9c104a853569f5e84ab4da320fd36e4c516415c0934f5ae6991b5ea6107931a1 datapathConfiguration="&{false false false false false }" interface=lxc1efcae18948f k8sPodName=openstack/staffeln-db-init-lr4w6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c104a8535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c104a8535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c104a8535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=46505 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c104a8535 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=984 identity=46505 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48bdc18735 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=382 identity=17980 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=48bdc18735 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=382 identity=17980 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-conductor-8475c9b459-jmjvh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b3a175872f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=651 identity=17673 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3a175872f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=651 identity=17673 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/staffeln-api-55fb778f48-mhvbp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9c104a8535 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=984 identity=46505 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c104a8535 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=46505 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9c104a8535 endpointID=984 k8sNamespace=openstack k8sPodName=staffeln-db-init-lr4w6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=bca492fc-a75f-43b3-b8c2-318dbe79972b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9c104a8535 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=984 identity=46505 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/staffeln-db-init-lr4w6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 66c35cf7-9acc-463b-8442-ad86295bf103 default }" containerID=bcb5efc248b1110bc8a785c3257f4c10daff4fe47f50de52a20780411df6aa24 datapathConfiguration="&{false false false false false }" interface=lxc5410f14bec43 k8sPodName=openstack/staffeln-db-sync-cszn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcb5efc248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcb5efc248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcb5efc248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=49558 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c23e71d4-6ee3-4618-aed9-e65d9bd2f412,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bcb5efc248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=49558 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcb5efc248 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=804 identity=49558 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcb5efc248 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=49558 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/staffeln-db-sync-cszn5 subsys=daemon