level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="991.102µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="106.903µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.149755ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.501µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.569155ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.98µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="25.61µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="81.003µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="79.122µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="85.722µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="574.913µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.65µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.59249ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.626897ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="43.091µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="42.891µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.325µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="120.673µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="83.202µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.471339ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="90.752µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.18µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.170.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.914058ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.061µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.665317ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.37309ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="6.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.92µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="63.311µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="68.662µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="99.702µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="309.428µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.61µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.55µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="220.545µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.337089ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.231878ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.31µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.041µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.170 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.170 ipAddr.ipv6="" k8sNodeIP=199.19.213.170 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.170" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.191" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.170" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.170} {CiliumInternalIP 10.0.0.191}] 10.0.0.0/24 [] [] 10.0.0.128 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35849" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.429900478s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.86µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.98µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="46.591µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="13.63µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3842 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.567646488s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=293.011588ms file-path=/var/run/cilium/state/templates/aa4311b75787f5aff89376b624c7b5add7784639a03ebd0f030a7f46e2443c60/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3842 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identityLabels="reserved:health" ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1741 identity=4 identityLabels="reserved:health" ipv4=10.0.0.128 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 75119da1-db22-481f-ba4f-f9434109dc85 default }" containerID=785056ebff0a3a8b47de9c8d48076371557162e0c73e3e8fbedaa6eb52231d3a datapathConfiguration="&{false false false false false }" interface=lxca03b0e2f3adf k8sPodName=kube-system/coredns-7c96b6546b-cqlts labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.30 624a2a9d-ae41-4bc1-9712-e1e1503c0a20 default }" containerID=3cc93ad37ae29da4145320b301006a07f7f1d32d57a89e21b70cd52f8fa9d00b datapathConfiguration="&{false false false false false }" interface=lxcaac6d40e1b6e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=51465 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=51465 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=34279 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=34279 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.08550787s file-path=/var/run/cilium/state/templates/b195c291486ead3ec34a47dd7dc1b5cc1babc17d93f448b51c034eeb04de3252/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1741 identity=4 ipv4=10.0.0.128 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=785056ebff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=37 identity=51465 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=endpoint level=info msg="Successful endpoint creation" containerID=785056ebff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=37 identity=51465 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3cc93ad37a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=658 identity=34279 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cc93ad37a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=34279 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3cc93ad37a endpointID=658 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-tpwhm subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9d7684bb-3d2b-477d-90be-9a0ab2e13a0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3cc93ad37a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=34279 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-tpwhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 6173a5da-e61e-414a-995f-5da6db4978e5 default }" containerID=4994f6fb815726ded6e86d3fc823e9622572a7b5b2f9a3a888f91e197e005331 datapathConfiguration="&{false false false false false }" interface=lxcc7c9e6c297e7 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4994f6fb81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4994f6fb81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4994f6fb81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=1861 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4994f6fb81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2134 identity=1861 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4994f6fb81 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2134 identity=1861 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4994f6fb81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2134 identity=1861 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9scq2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3842 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03842 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03842 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03842 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03842:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3842 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 5fa72d1c-c66f-4451-b5dd-27dc31eed6ca default }" containerID=1507662b5a1c8b43678afcdeb517c1f839c9cbe7d1209c8494b4b0164fce099a datapathConfiguration="&{false false false false false }" interface=lxc447179ab16f7 k8sPodName=kube-system/coredns-67659f764b-xljss labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1507662b5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3393 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1507662b5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3393 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1507662b5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3393 identity=51465 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1507662b5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3393 identity=51465 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 1cc3d8d4-b9c7-47b7-bb18-35756eac52c9 default }" containerID=47487538089117074a4e8434f10a47cfe8e5e06d046c2da64d66753d824576b3 datapathConfiguration="&{false false false false false }" interface=lxc028b109ae3a6 k8sPodName=kube-system/coredns-67659f764b-nvcc9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4748753808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4748753808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4748753808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identity=51465 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4748753808 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1307 identity=51465 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1507662b5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3393 identity=51465 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss subsys=endpoint level=info msg="Successful endpoint creation" containerID=1507662b5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3393 identity=51465 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-xljss subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4748753808 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1307 identity=51465 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4748753808 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1307 identity=51465 ipv4=10.0.0.189 ipv6= k8sPodName=kube-system/coredns-67659f764b-nvcc9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 4c5b4ea0-7724-4dcf-891d-4ea4e5bbbf04 default }" containerID=eac265e7038617afd83ba36fcc8410e73a15ddeaa12a41c05324e3c9fb656098 datapathConfiguration="&{false false false false false }" interface=lxcbcbed6ddb08c k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eac265e703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eac265e703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eac265e703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=23552 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eac265e703 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3418 identity=23552 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eac265e703 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3418 identity=23552 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr subsys=endpoint level=info msg="Successful endpoint creation" containerID=eac265e703 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3418 identity=23552 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vckrr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=785056ebff endpointID=37 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-cqlts subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=785056ebff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=37 identity=51465 ipv4=10.0.0.165 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-cqlts subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.107 442878a3-e831-4d8a-a56f-51ab7a7deaa0 default }" containerID=6ba34628399914284202012d78bc6cd239087feb81645e68c186eeebee7a8cf5 datapathConfiguration="&{false false false false false }" interface=lxc2c69d77f2634 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ba3462839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ba3462839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ba3462839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=12377 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ba3462839 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3071 identity=12377 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 9ec32a62-0b66-4136-a84f-4743bf8408df default }" containerID=9f4b0d90a0ade3237f08cb14a5c1d4e162d1d5331c4eee191c5b0d87e0968833 datapathConfiguration="&{false false false false false }" interface=lxc49f7387d60d0 k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f4b0d90a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 e668bdcb-424c-4d22-b1a9-5aa76f146405 default }" containerID=b557afe1283efcce43e74848ce39dcd658c11073aa5b16e5d945942cc88579a1 datapathConfiguration="&{false false false false false }" interface=lxc80e22b66e7d4 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b557afe128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f4b0d90a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b557afe128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f4b0d90a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=14300 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f4b0d90a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=14300 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b557afe128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=6070 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b557afe128 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=618 identity=6070 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ba3462839 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3071 identity=12377 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ba3462839 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3071 identity=12377 ipv4=10.0.0.107 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-x8dg9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9f4b0d90a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=202 identity=14300 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f4b0d90a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=202 identity=14300 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-4785f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b557afe128 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=618 identity=6070 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b557afe128 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=618 identity=6070 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s5zfp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 cf60f524-a4d3-4a36-bb51-f292588f9c2e default }" containerID=65bbdf08726f34841976e02455c1cbc937e9116e205e93c5360cf058a3cbe8de datapathConfiguration="&{false false false false false }" interface=lxc5b6866c6c36b k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65bbdf0872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2630 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65bbdf0872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2630 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65bbdf0872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2630 identity=51623 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65bbdf0872 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2630 identity=51623 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65bbdf0872 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2630 identity=51623 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=65bbdf0872 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2630 identity=51623 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65bbdf0872 endpointID=2630 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-n8bnw subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=06c9f24b-49e0-4e11-b046-ca763b1e255a k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=65bbdf0872 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2630 identity=51623 ipv4=10.0.0.253 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n8bnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 227d04f7-d765-4f18-9e00-15be4d8a129c default }" containerID=7fdfd956af6fac167fd9e678fe59925f8253a9f55ca26e4f5a4a5acdd779aaf4 datapathConfiguration="&{false false false false false }" interface=lxcff5167e39cbf k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fdfd956af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fdfd956af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fdfd956af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=17301 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fdfd956af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=17301 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7fdfd956af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3460 identity=17301 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fdfd956af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=17301 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7fdfd956af endpointID=3460 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rggh5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=f4135ba7-a5df-4896-b2b2-86bb08aaaf4b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=7fdfd956af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=17301 ipv4=10.0.0.250 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rggh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 8c5ed178-41af-470f-b11f-6f4827930051 default }" containerID=0297a8f23f297ead98b963a785b0730933c5b197b5a36e2c7a1cf6be870b57e9 datapathConfiguration="&{false false false false false }" interface=lxc6ba5872aa411 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0297a8f23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0297a8f23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0297a8f23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=15535 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0297a8f23f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3738 identity=15535 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0297a8f23f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3738 identity=15535 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0297a8f23f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3738 identity=15535 ipv4=10.0.0.171 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-9rnlh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 3b0ea9eb-056f-4acd-bc46-0ac5a102e321 default }" containerID=1256f70650e009536dc88e748949b43717659019fbdf153a82f1b365ad40a439 datapathConfiguration="&{false false false false false }" interface=lxcfbe2700fbc65 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1256f70650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1256f70650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1256f70650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=470 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1256f70650 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=470 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1256f70650 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1877 identity=470 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1256f70650 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1877 identity=470 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1256f70650 endpointID=1877 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-cmgnr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=6ff38703-3904-46b3-ab46-1dafbeb2c9fb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=1256f70650 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1877 identity=470 ipv4=10.0.0.69 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-cmgnr subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=98e2bb12-a2f8-4685-91f0-ab8b1c53b63e] Description:}]" policyAddRequest=afc50624-81f1-48c8-bfdd-93f1545b54d0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=afc50624-81f1-48c8-bfdd-93f1545b54d0 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=620f6017-5ecf-4289-90a4-85c0f4cbe91b] Description:}]" policyAddRequest=16f72c73-79d9-49ef-87d3-c7391797553a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=16f72c73-79d9-49ef-87d3-c7391797553a policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.81 88407d81-524f-4a0f-b275-d02643597847 default }" containerID=7372806489c813299bea86c001200fb3ace8b71f74ea5cf296c1e3582e3f91f6 datapathConfiguration="&{false false false false false }" interface=lxc38fad73897b9 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=59733 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=59733 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7372806489 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1299 identity=59733 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7372806489 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1299 identity=59733 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-ht695 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.214 0de4ec44-242a-497c-8548-7684977f6b46 default }" containerID=8afc690450991c10ac24fa070ebf967794695f93cd5238e7b5d144bfc255964b datapathConfiguration="&{false false false false false }" interface=lxc23a3c0537565 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8afc690450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8afc690450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8afc690450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=11025 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8afc690450 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=684 identity=11025 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8afc690450 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=684 identity=11025 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft subsys=endpoint level=info msg="Successful endpoint creation" containerID=8afc690450 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=684 identity=11025 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-lqsft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.84 85654440-4ddc-469b-9ff5-093bfcd6b3b2 default }" containerID=e93cd2bdf81f03b5c3fa96e4b9a58fbee6e82ea32ae2dce697ef69f980298e8e datapathConfiguration="&{false false false false false }" interface=lxc2236cb0097b9 k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e93cd2bdf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e93cd2bdf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e93cd2bdf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=879 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e93cd2bdf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2992 identity=879 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e93cd2bdf8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2992 identity=879 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e93cd2bdf8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2992 identity=879 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-sf869 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.238 b6ebc365-55c7-4aa2-8f44-760bdc8180eb default }" containerID=74bc06df5c0bf647671630ca4a1efd9838ba0567469da5ce7d2715b3f21af9e1 datapathConfiguration="&{false false false false false }" interface=lxc878d242851bf k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74bc06df5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74bc06df5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74bc06df5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=5009 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74bc06df5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1641 identity=5009 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 0b8edb77-3b5f-474f-a69c-d9fb08052be0 default }" containerID=3d0a7b23e79d817ea2dee7c6926fe738df73026635464bb03b65d4be5d3b3bca datapathConfiguration="&{false false false false false }" interface=lxc1e21b997530f k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d0a7b23e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d0a7b23e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d0a7b23e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d0a7b23e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1995 identity=54140 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74bc06df5c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1641 identity=5009 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74bc06df5c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1641 identity=5009 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3d0a7b23e7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1995 identity=54140 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d0a7b23e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1995 identity=54140 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d0a7b23e7 endpointID=1995 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3d0a7b23e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1995 identity=54140 ipv4=10.0.0.196 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-009cc8c0-c244-41bb-843a-d0f0b475d383 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 9c247c9e-e0df-42ad-a2dd-e32cdd4b32f9 default }" containerID=9ff93746d9cf738674df00a8b4e3c30d3ff98384dfce46600f31d471da701c48 datapathConfiguration="&{false false false false false }" interface=lxce3c262dcafa1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=37711 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2920 identity=37711 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ff93746d9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2920 identity=37711 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ff93746d9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2920 identity=37711 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9acbb378-e8fb-4559-afa8-d2ce8d0ce8d8] Description:}]" policyAddRequest=dbbf6fd0-bfd6-4c27-813e-13161f101a1a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dbbf6fd0-bfd6-4c27-813e-13161f101a1a policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.16 a67f4b8b-4e05-4768-9dbf-f06c7761719f default }" containerID=a7e742161d89553425d97cbc83c875d58776cd98405fda6491556c1c3ad757e5 datapathConfiguration="&{false false false false false }" interface=lxcd907edbec729 k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7e742161d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7e742161d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7e742161d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7e742161d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=278 identity=54140 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7e742161d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=278 identity=54140 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7e742161d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=278 identity=54140 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=daemon level=info msg="Delete endpoint request" containerID=a7e742161d endpointID=278 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a7e742161d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=278 identity=54140 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b9878635-f63d-4110-8bba-bfb8e96337b1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 d1e6dfca-2d8b-49b9-89e9-e12cad725bee default }" containerID=938e45af8bac38aae3fb4ecdd911466f3fb3cf85fbab8bb7579c8cc7c896fe54 datapathConfiguration="&{false false false false false }" interface=lxc621a05502927 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=48896 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=904 identity=48896 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=938e45af8b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=904 identity=48896 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=938e45af8b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=904 identity=48896 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=6629dfaf-2fe8-4ecf-bd90-18bf0b4c6489] Description:}]" policyAddRequest=dce6469c-e358-4ae9-8a13-8dc59c97b2c0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=dce6469c-e358-4ae9-8a13-8dc59c97b2c0 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.215 83529ae6-26cb-489d-8560-6ed9757e8d38 default }" containerID=4198f6a577dd139567c091219fd4ce7e2c3a7442fe6c96450a470d6bf6560551 datapathConfiguration="&{false false false false false }" interface=lxc8cf36c7da687 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4198f6a577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4198f6a577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4198f6a577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=12663 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4198f6a577 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1723 identity=12663 ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4198f6a577 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1723 identity=12663 ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4198f6a577 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1723 identity=12663 ipv4=10.0.0.215 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010310847187089967 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.82 b31470f3-e2b3-48cd-a798-828b371a7036 default }" containerID=b3c39d76e82160c99023c3931305790e2b298f2b2bb78b6c6ac49dd88143347c datapathConfiguration="&{false false false false false }" interface=lxc3db1a23a3a40 k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.19 cd18e94f-e02b-4861-b407-c319ec64cf46 default }" containerID=1f3ea0427826a56a8429154fe648b9c20119d7900ed45f750cb491956c9e049a datapathConfiguration="&{false false false false false }" interface=lxc4fa887809257 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=5523 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=5523 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=15383 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1390 identity=15383 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 531d3a93-305f-43f0-8858-4a44042d0310 default }" containerID=9ff915a24c7361dd1aedf4fff4f80120bd0d06acaf4e5a9085ea19089495343a datapathConfiguration="&{false false false false false }" interface=lxc3d0da824458c k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ff915a24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ff915a24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ff915a24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=1116 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ff915a24c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1226 identity=1116 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3c39d76e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=224 identity=5523 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3c39d76e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=224 identity=5523 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-xp4v2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f3ea04278 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1390 identity=15383 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f3ea04278 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1390 identity=15383 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-b7m65 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9ff915a24c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1226 identity=1116 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ff915a24c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1226 identity=1116 ipv4=10.0.0.65 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-g2j45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 0beb27b5-d958-4e18-bcad-a4cbb49d1b8c default }" containerID=93a7c7e2b8b4cce16ba0d77b178c8622cca8e229d18eb072b81db3cb2c06fa9b datapathConfiguration="&{false false false false false }" interface=lxcde95e2f1710c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93a7c7e2b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93a7c7e2b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93a7c7e2b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=10250 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93a7c7e2b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=10250 ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=93a7c7e2b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=900 identity=10250 ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93a7c7e2b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=900 identity=10250 ipv4=10.0.0.48 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-n7tk5 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3842 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03842 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03842 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03842 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03842:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3842 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.158 63840315-10d2-4721-b63a-ce7846ca32bb default }" containerID=1d00a2b2fb226de287bc1fc14026240316bffb037cb1e865952234d14e0ab8eb datapathConfiguration="&{false false false false false }" interface=lxc165c8c3dca82 k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d00a2b2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d00a2b2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=245c4054-4758-4ccb-99e9-9e7995095220,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=245c4054-4758-4ccb-99e9-9e7995095220,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=245c4054-4758-4ccb-99e9-9e7995095220;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=245c4054-4758-4ccb-99e9-9e7995095220;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d00a2b2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=3956 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=245c4054-4758-4ccb-99e9-9e7995095220,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=245c4054-4758-4ccb-99e9-9e7995095220,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d00a2b2fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=3956 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1d00a2b2fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=140 identity=3956 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d00a2b2fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=3956 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1d00a2b2fb endpointID=140 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-tfzld subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=245c4054-4758-4ccb-99e9-9e7995095220 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=245c4054-4758-4ccb-99e9-9e7995095220 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=1d00a2b2fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=140 identity=3956 ipv4=10.0.0.158 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-tfzld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 d784893d-1487-4995-9356-7e45257c1303 default }" containerID=273a5390672d7f042416095f470cfd71d5c6c1dc4b1bbad564f4cf834de41e3f datapathConfiguration="&{false false false false false }" interface=lxc03fe2618be64 k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273a539067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273a539067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=273a539067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=12679 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=273a539067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=12679 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 ce4a060f-5006-4dfc-b760-9d3eb57b0f00 default }" containerID=f13da4e7c2f2b9c29b846b5de52788528aa16b83b20f7cb6692902e92a0723e1 datapathConfiguration="&{false false false false false }" interface=lxc21289f618fb1 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f13da4e7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f13da4e7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.200 c54e4e12-e5ca-4f35-b4e3-82b51d4b517e default }" containerID=081a8cf5a6c371e5d28366494ff4e6df9acd57fea463cc1a7940ff9665cb90f7 datapathConfiguration="&{false false false false false }" interface=lxc4ca3c970e45c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=081a8cf5a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=081a8cf5a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f13da4e7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=32892 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f13da4e7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=32892 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=081a8cf5a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=51082 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=081a8cf5a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=51082 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=273a539067 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=897 identity=12679 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb subsys=endpoint level=info msg="Successful endpoint creation" containerID=273a539067 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=897 identity=12679 ipv4=10.0.0.18 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7758f45bd6-x8ckb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f13da4e7c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1716 identity=32892 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f13da4e7c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1716 identity=32892 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-rn5f8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=081a8cf5a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2020 identity=51082 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv subsys=endpoint level=info msg="Successful endpoint creation" containerID=081a8cf5a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2020 identity=51082 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-868pv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 44e352b3-0cea-4f23-9826-bf7acced170c default }" containerID=09bd1d50e5860c1c8621227cdef3c9b11111f83380e18d53835d9d41918a8107 datapathConfiguration="&{false false false false false }" interface=lxcc85a5b495ecd k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09bd1d50e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09bd1d50e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09bd1d50e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=28191 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09bd1d50e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=28191 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09bd1d50e5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=28191 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=09bd1d50e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=28191 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09bd1d50e5 endpointID=236 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-7vbgn subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ca4c4b76-56b1-4da5-83c7-974217b02832 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=09bd1d50e5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=28191 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7vbgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 7230334b-460a-41d5-86c0-1697111c367d default }" containerID=9ecc375ce5980372bc54d14f5eecde9819795f76899f90ba4aa100b1d4f1a82f datapathConfiguration="&{false false false false false }" interface=lxcd007db10e90d k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ecc375ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ecc375ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ecc375ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ecc375ce5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=54140 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ecc375ce5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=187 identity=54140 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ecc375ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=54140 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.117 a58a10d3-4561-4e8b-9a68-8640f362d70a default }" containerID=0cf08d3d26f86d6d5276760211ce4916f629b88acfbc83dd370d8d552cc15b42 datapathConfiguration="&{false false false false false }" interface=lxc223726b126de k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf08d3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf08d3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0cf08d3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cf08d3d26 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=54140 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cf08d3d26 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1801 identity=54140 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf08d3d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=54140 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=daemon level=info msg="Delete endpoint request" containerID=9ecc375ce5 endpointID=187 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9ecc375ce5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=187 identity=54140 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-83f8f61f-5f1f-46a1-9465-bbebfbb0ed48 subsys=endpoint level=info msg="Delete endpoint request" containerID=0cf08d3d26 endpointID=1801 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0cf08d3d26 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=54140 ipv4=10.0.0.117 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e4e2e349-9cea-4614-9aba-21ae581e8388 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 1f931538-e444-4324-8f4d-5671d803a606 default }" containerID=6385c51181bbb26de23a84c29a8f1f8dc01617bb397e42dc0140feede593d60b datapathConfiguration="&{false false false false false }" interface=lxccf7015f1ce70 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identity=42596 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2536 identity=42596 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6385c51181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2536 identity=42596 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6385c51181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2536 identity=42596 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 97e126e9-38e7-4a08-b473-39244c89bc49 default }" containerID=9f0875bd38622436709f079f8c2103362e5f213776887b300cae18aae1dc3947 datapathConfiguration="&{false false false false false }" interface=lxcbc75f49c0b3f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f0875bd38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f0875bd38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f0875bd38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=451 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f0875bd38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=451 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f0875bd38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2377 identity=451 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f0875bd38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2377 identity=451 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 bbf341b1-62e0-4932-83b6-a128001ea78d default }" containerID=b819a223285ff661033e08aa6d25460a83af8bd13f2c36f36ae19de91da1edfb datapathConfiguration="&{false false false false false }" interface=lxc0a9dbbc7820f k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b819a22328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b819a22328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b819a22328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=55677 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b819a22328 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=55677 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 423be29c-b8a1-4457-907e-0bcfc08218cb default }" containerID=773f18beb4dcf888f41b8658624d52b04d23f7321b550d8c3e6195e84125b3ba datapathConfiguration="&{false false false false false }" interface=lxc2050222c2305 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=773f18beb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=773f18beb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=773f18beb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=24865 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=773f18beb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=24865 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b819a22328 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2298 identity=55677 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc subsys=endpoint level=info msg="Successful endpoint creation" containerID=b819a22328 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=55677 ipv4=10.0.0.154 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pj6vc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 ddb498f2-e2d9-4e4a-a129-4678a0cd9981 default }" containerID=7415eb94cf097ada4a951eec46a6c84b4e0f6e4ec7b6ec77a47f0eb2fdb7b9cc datapathConfiguration="&{false false false false false }" interface=lxc68e169d04777 k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7415eb94cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7415eb94cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7415eb94cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7415eb94cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3865 identity=54140 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.35 ce1155d6-06fe-418b-bbc4-d7f93a538148 default }" containerID=4e1f645c9fb0562c4543a1abfffaf7cab98c2e5ff122a8e5d2e34a1e337fbe9c datapathConfiguration="&{false false false false false }" interface=lxc3819b0fc7200 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e1f645c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e1f645c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e1f645c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=10012 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e1f645c9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1072 identity=10012 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=773f18beb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=24865 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=773f18beb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=24865 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7415eb94cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3865 identity=54140 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7415eb94cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3865 identity=54140 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4e1f645c9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1072 identity=10012 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e1f645c9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1072 identity=10012 ipv4=10.0.0.35 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 cb7dc52d-3e93-48c9-bd2a-8a3aed004d12 default }" containerID=4e00d2e1070e1bdd4f0c194f2c715bd0eaeff7af6290eb673829deb27890c621 datapathConfiguration="&{false false false false false }" interface=lxcb65b5b3c8f36 k8sPodName=monitoring/vector-42whl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e00d2e107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e00d2e107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e00d2e107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=50970 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e00d2e107 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=267 identity=50970 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e00d2e107 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=267 identity=50970 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e00d2e107 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=267 identity=50970 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/vector-42whl subsys=daemon level=info msg="Delete endpoint request" containerID=7415eb94cf endpointID=3865 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7415eb94cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3865 identity=54140 ipv4=10.0.0.115 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-42ae5b03-dcba-4e98-99ef-735d214ff5a6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 1c9a0a16-bcff-4f54-b4f9-1d970dfdf10f default }" containerID=16d85858b77bc67d670d3a920c3ab4f1f1d98bc6c4415943ef3e5c5889571fe8 datapathConfiguration="&{false false false false false }" interface=lxcf821a96ee468 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=52179 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3434 identity=52179 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16d85858b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3434 identity=52179 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16d85858b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3434 identity=52179 ipv4=10.0.0.213 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.67 26a1bfc6-567a-44cf-a306-82daffe301e5 default }" containerID=9cb45998d46ccfd166b33099f14ad57e635acc9b79807f027ac0bb38e9a14214 datapathConfiguration="&{false false false false false }" interface=lxc8c03524d991a k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cb45998d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cb45998d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cb45998d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=45248 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cb45998d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1396 identity=45248 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9cb45998d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1396 identity=45248 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cb45998d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1396 identity=45248 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-sdnw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 5cdfdabf-c9fa-417c-9417-1813efae6eec default }" containerID=217baa78f362b2ad13906213ceed46c92d41dc816b3059fdfe8dabfc82a7359d datapathConfiguration="&{false false false false false }" interface=lxc3a2f33693be7 k8sPodName=openstack/memcached-memcached-6479589586-q4dqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=217baa78f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=217baa78f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=217baa78f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=18175 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=217baa78f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=18175 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=217baa78f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=583 identity=18175 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=217baa78f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=583 identity=18175 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q4dqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 b3c0b45f-4717-479b-bca9-a3b7df595dca default }" containerID=e297665692241a1f4a6eaea330ae8842543477cc85dc252174bc47f4c1898663 datapathConfiguration="&{false false false false false }" interface=lxcea1f48ab9da1 k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e297665692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e297665692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e297665692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e297665692 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=503 identity=54140 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e297665692 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=503 identity=54140 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e297665692 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=54140 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=daemon level=info msg="Delete endpoint request" containerID=e297665692 endpointID=503 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e297665692 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=503 identity=54140 ipv4=10.0.0.55 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2e8b44cf-5f23-4844-9601-e29d0dbffa91 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 352676b9-9fe4-4176-b2bc-77c08e0bccdb default }" containerID=358721b9a82beab29a16db74fc0e2d43e26b0038ef25dc62917bfd6d4f3b55f5 datapathConfiguration="&{false false false false false }" interface=lxc609860960050 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=64470 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=64470 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=358721b9a8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=746 identity=64470 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=358721b9a8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=746 identity=64470 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 314d8938-d13d-4815-89a5-f994db7d16bd default }" containerID=a9a63caf9da163b46a72e8466326245eca619bc93c2db7f986797e044486de24 datapathConfiguration="&{false false false false false }" interface=lxc8bfd513d1917 k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=3188 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1376 identity=3188 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 62c3ab57-3cc9-4e8d-b115-b0afc2950fff default }" containerID=6dd3fa9ea0323aefb69c2c30789cecbdd0daae907ef9e883de926debb8430115 datapathConfiguration="&{false false false false false }" interface=lxc956618d8d1a0 k8sPodName=openstack/keystone-credential-setup-krtbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dd3fa9ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dd3fa9ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dd3fa9ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=4152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dd3fa9ea0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=636 identity=4152 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9a63caf9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1376 identity=3188 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9a63caf9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1376 identity=3188 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-api-697bb4d7bc-5hhl5 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6dd3fa9ea0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=636 identity=4152 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dd3fa9ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=4152 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6dd3fa9ea0 endpointID=636 k8sNamespace=openstack k8sPodName=keystone-credential-setup-krtbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=b89e18c7-c9d5-47e1-90c1-294c323e3185 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6dd3fa9ea0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=636 identity=4152 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-krtbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 7d3f359f-1f08-4c6f-9cd2-4ee6a1fb67ba default }" containerID=36898ba5a5d42fdbc6cb71fd9eb257866353cb070463c2b1d80638a2a0cd7b28 datapathConfiguration="&{false false false false false }" interface=lxc68ca16100349 k8sPodName=openstack/keystone-db-init-sz9hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36898ba5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36898ba5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36898ba5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=2891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=36898ba5a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=2891 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36898ba5a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=2891 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=36898ba5a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=2891 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36898ba5a5 endpointID=507 k8sNamespace=openstack k8sPodName=keystone-db-init-sz9hn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=2cf186a2-3410-45b1-9f58-9806a6b2f584 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=36898ba5a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=2891 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/keystone-db-init-sz9hn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 afbce022-bca4-407c-b952-f9d452ccbade default }" containerID=6da1f5bc70724b43422bf872cee4209adc4fb8f9492d867c3b1129d84bb7287c datapathConfiguration="&{false false false false false }" interface=lxc9a28fb84601a k8sPodName=openstack/keystone-fernet-setup-f9c6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6da1f5bc70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6da1f5bc70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6da1f5bc70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=26361 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6da1f5bc70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=90 identity=26361 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6da1f5bc70 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=90 identity=26361 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=6da1f5bc70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=26361 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=daemon level=info msg="Delete endpoint request" containerID=6da1f5bc70 endpointID=90 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-f9c6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=5dbe933a-2248-4591-8b91-e73d35a4eff7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6da1f5bc70 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=90 identity=26361 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/keystone-fernet-setup-f9c6b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.246 822aae4b-dcda-43cd-b552-008f93cb281b default }" containerID=d06c8a729e6ee7a94b760cf7b7868c9011ad20fad928d998c81de9f46d61d76b datapathConfiguration="&{false false false false false }" interface=lxcb7b49a3dbdf1 k8sPodName=openstack/keystone-db-sync-s9xdl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=52202 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2420 identity=52202 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d06c8a729e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2420 identity=52202 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=endpoint level=info msg="Successful endpoint creation" containerID=d06c8a729e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2420 identity=52202 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d06c8a729e endpointID=2420 k8sNamespace=openstack k8sPodName=keystone-db-sync-s9xdl subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=e8d36cfc-95d9-4dc8-8762-87873f5dfaab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d06c8a729e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2420 identity=52202 ipv4=10.0.0.246 ipv6= k8sPodName=openstack/keystone-db-sync-s9xdl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 195ba78d-3498-4dee-84af-acf2009d8849 default }" containerID=101d4324df1931d78b2db6872af637b60e5bf18a106b22f208fd35dbc88b83a1 datapathConfiguration="&{false false false false false }" interface=lxc2a87b5af25ec k8sPodName=openstack/keystone-rabbit-init-q6wxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=101d4324df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=101d4324df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=101d4324df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=48683 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=101d4324df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2256 identity=48683 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=101d4324df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2256 identity=48683 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=101d4324df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2256 identity=48683 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=101d4324df endpointID=2256 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-q6wxj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a827fb6c-18bd-41ee-be18-89344a3f2654 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=101d4324df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2256 identity=48683 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-rabbit-init-q6wxj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 79d7536c-6148-4bf0-93d2-3b616a8c2585 default }" containerID=c4ade0727c5c27a68f735edf0d622dc0ca3f9c1ed14602c07bd6223c7c84b578 datapathConfiguration="&{false false false false false }" interface=lxc02394e73d480 k8sPodName=openstack/keystone-domain-manage-g5vj9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c4ade0727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4ade0727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4ade0727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=14852 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4ade0727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1102 identity=14852 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c4ade0727c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1102 identity=14852 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4ade0727c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1102 identity=14852 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c4ade0727c endpointID=1102 k8sNamespace=openstack k8sPodName=keystone-domain-manage-g5vj9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=05b76125-dd44-4ad0-8b10-f0c16661bca5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c4ade0727c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1102 identity=14852 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/keystone-domain-manage-g5vj9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 9f3ed153-14d0-4649-ab50-6070e236899a default }" containerID=365346e181e9425998d2ca65169268ea11d81f1155a8e89be7c9a8f825984ae0 datapathConfiguration="&{false false false false false }" interface=lxc69f54dd34d4c k8sPodName=openstack/keystone-bootstrap-ntwqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=365346e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=365346e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=365346e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=12080 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=365346e181 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2523 identity=12080 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=365346e181 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2523 identity=12080 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=365346e181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2523 identity=12080 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=daemon level=info msg="Delete endpoint request" containerID=365346e181 endpointID=2523 k8sNamespace=openstack k8sPodName=keystone-bootstrap-ntwqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=54c54ad7-3536-4e3f-8683-a9d61046262b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=365346e181 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2523 identity=12080 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/keystone-bootstrap-ntwqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 a873a0e9-0fb7-4bc8-ad48-cc4c919f4eb4 default }" containerID=416fe57895897cf3b55e92ec53f145e32082d1d0991a40a66dab57316d808c4c datapathConfiguration="&{false false false false false }" interface=lxc90923940fb57 k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=416fe57895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=416fe57895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=416fe57895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=416fe57895 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=54140 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=416fe57895 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=773 identity=54140 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=endpoint level=info msg="Successful endpoint creation" containerID=416fe57895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=54140 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=daemon level=info msg="Delete endpoint request" containerID=416fe57895 endpointID=773 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=416fe57895 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=54140 ipv4=10.0.0.130 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4f728ada-4acc-4a0d-842a-d2b8a19d7434 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 780c58d3-be7e-4387-9407-da1ee13dcd13 default }" containerID=116ad9cc0bc885498829986b6781ddd716dbc9eee0b0951182eaaff392c33208 datapathConfiguration="&{false false false false false }" interface=lxc2c5a3fb18f7b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=40191 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=40191 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=116ad9cc0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=40191 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=116ad9cc0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=40191 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 076b148c-056a-4a59-a518-53f6847cf983 default }" containerID=746e931fff3e940d9a65c0fe483c0b859d0ea367d2fd8f83daf436e8be37974d datapathConfiguration="&{false false false false false }" interface=lxc622187d49ea4 k8sPodName=openstack/barbican-db-init-gxshb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=746e931fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=746e931fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=746e931fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=3566 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=746e931fff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3651 identity=3566 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=746e931fff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3651 identity=3566 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=endpoint level=info msg="Successful endpoint creation" containerID=746e931fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3651 identity=3566 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 8e7da65c-cbe6-4940-a99d-b6c433bbb19a default }" containerID=b8c4b069d498dcde480a99ce3629b4b5ab60844e49205c47815d456781b1385e datapathConfiguration="&{false false false false false }" interface=lxcf7f3391154d0 k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c4b069d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c4b069d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8c4b069d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=14461 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c4b069d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2132 identity=14461 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8c4b069d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2132 identity=14461 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c4b069d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2132 identity=14461 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-6956bff5fc-j5tzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=746e931fff endpointID=3651 k8sNamespace=openstack k8sPodName=barbican-db-init-gxshb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=521381d2-6455-4305-84a1-f2fbefca9b53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=746e931fff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3651 identity=3566 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/barbican-db-init-gxshb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 ea21ffc7-fc3e-4ce4-a569-56b9831eafcd default }" containerID=fac04d30b6113f2ef821d0e6a7a6fc1cce0e31fe07f5f7c4968c769b26fd654e datapathConfiguration="&{false false false false false }" interface=lxc46fd455a7891 k8sPodName=openstack/barbican-db-sync-lndn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identity=24098 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2671 identity=24098 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fac04d30b6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2671 identity=24098 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fac04d30b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2671 identity=24098 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.035879989719588244 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=fac04d30b6 endpointID=2671 k8sNamespace=openstack k8sPodName=barbican-db-sync-lndn6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9f740c77-066e-4d9d-9872-1e600d97b19c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fac04d30b6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2671 identity=24098 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-sync-lndn6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 f7a870a0-eaab-425b-b4bd-2c6e7bc95e5c default }" containerID=3b4f1ad0e93cedcfdc9af3d69c4c9e226e51cd7a8b0663d13b47cac581eba63d datapathConfiguration="&{false false false false false }" interface=lxccaaec75bc9b0 k8sPodName=openstack/barbican-rabbit-init-vl8cb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b4f1ad0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b4f1ad0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f4015f64-9262-4b49-ad52-0638355ac157,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f4015f64-9262-4b49-ad52-0638355ac157,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f4015f64-9262-4b49-ad52-0638355ac157;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f4015f64-9262-4b49-ad52-0638355ac157;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b4f1ad0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=15033 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f4015f64-9262-4b49-ad52-0638355ac157,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f4015f64-9262-4b49-ad52-0638355ac157,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3b4f1ad0e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b4f1ad0e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2484 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b4f1ad0e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2484 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=daemon level=info msg="Delete endpoint request" containerID=3b4f1ad0e9 endpointID=2484 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-vl8cb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f4015f64-9262-4b49-ad52-0638355ac157 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f4015f64-9262-4b49-ad52-0638355ac157 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3b4f1ad0e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2484 identity=15033 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/barbican-rabbit-init-vl8cb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 0060151b-442b-4a9a-9545-2276e05a4a58 default }" containerID=23e7b1a30c2ac35901fb9631b1787a0cfeb9058fa782055b0419ededaa98a7b9 datapathConfiguration="&{false false false false false }" interface=lxc32c1a3e9eaa8 k8sPodName=openstack/barbican-ks-service-z9pkf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23e7b1a30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23e7b1a30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23e7b1a30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=1374 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23e7b1a30c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1068 identity=1374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=23e7b1a30c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1068 identity=1374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=endpoint level=info msg="Successful endpoint creation" containerID=23e7b1a30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=1374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=daemon level=info msg="Delete endpoint request" containerID=23e7b1a30c endpointID=1068 k8sNamespace=openstack k8sPodName=barbican-ks-service-z9pkf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=18592005-a0ea-46cf-9980-3a07ddcead4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=23e7b1a30c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1068 identity=1374 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-ks-service-z9pkf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 3c36691f-63d5-433d-b118-fb305981c662 default }" containerID=8720f1bb62d8659e9f2caf9d9a9c5348467c1e53087ebfcde863a9d470b3730e datapathConfiguration="&{false false false false false }" interface=lxc3e0ae9044fe0 k8sPodName=openstack/barbican-ks-endpoints-8lc4v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8720f1bb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8720f1bb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8720f1bb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identity=41085 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8720f1bb62 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2166 identity=41085 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8720f1bb62 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2166 identity=41085 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=endpoint level=info msg="Successful endpoint creation" containerID=8720f1bb62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2166 identity=41085 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8720f1bb62 endpointID=2166 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-8lc4v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f0c12846-877b-45dc-9ad3-357350f90fd2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8720f1bb62 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2166 identity=41085 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/barbican-ks-endpoints-8lc4v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 301ba188-d7d1-4d69-bbd3-40cca3da5f3e default }" containerID=dbfa7f0e397d1739d7523a644eed11d68cea664a3f1a9d33f9c74d3a85afeb62 datapathConfiguration="&{false false false false false }" interface=lxc7617ac36ad15 k8sPodName=openstack/barbican-ks-user-m5ffm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbfa7f0e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbfa7f0e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbfa7f0e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identity=15790 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbfa7f0e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3327 identity=15790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbfa7f0e39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3327 identity=15790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbfa7f0e39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3327 identity=15790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dbfa7f0e39 endpointID=3327 k8sNamespace=openstack k8sPodName=barbican-ks-user-m5ffm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=0008cd7c-0fc4-4199-b158-9a5c8ec52a59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dbfa7f0e39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3327 identity=15790 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/barbican-ks-user-m5ffm subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.219 069d3699-3392-4e75-bb7b-af7311b3a95a default }" containerID=95d5ebcfb76b124b6d23e3ad84ec9f4aa7245b11657dfba1b97b6e559f77f587 datapathConfiguration="&{false false false false false }" interface=lxc579ba8546dac k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95d5ebcfb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95d5ebcfb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95d5ebcfb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=65489 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95d5ebcfb7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3659 identity=65489 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95d5ebcfb7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3659 identity=65489 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95d5ebcfb7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3659 identity=65489 ipv4=10.0.0.219 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bdql7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 b61b235d-9f93-4cf9-9823-32474ff90e16 default }" containerID=4055e0cb798682435b0b4528cb307d42883982200adafc80be7137d013e58a1e datapathConfiguration="&{false false false false false }" interface=lxcfca429a96431 k8sPodName=openstack/rook-ceph-detect-version-jk7fp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4055e0cb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4055e0cb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4055e0cb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=1263 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4055e0cb79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1945 identity=1263 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4055e0cb79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1945 identity=1263 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=endpoint level=info msg="Successful endpoint creation" containerID=4055e0cb79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=1263 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=daemon level=info msg="Delete endpoint request" containerID=4055e0cb79 endpointID=1945 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-jk7fp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=215ceed3-318a-4aaa-a867-34246e17f8cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=4055e0cb79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1945 identity=1263 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/rook-ceph-detect-version-jk7fp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 273f59f8-7f7b-47a7-81d2-233349dc0952 default }" containerID=6f7e4ca2997b4134c8e08173593c3b98291ef5f031fb41d92a8901aa91b089d9 datapathConfiguration="&{false false false false false }" interface=lxc4f873070e86a k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=18969 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=463 identity=18969 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f7e4ca299 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=463 identity=18969 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f7e4ca299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=18969 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f7e4ca299 endpointID=463 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-w7j54 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d65fcaa1-641b-4548-abfd-53beafb58976 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6f7e4ca299 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=463 identity=18969 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-w7j54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 08ae92f4-1023-4494-bfa7-f4b39f7ad02c default }" containerID=f929cce3837118af6a5f240930a5cb0524841c246ecc246305eb8ba4732331b1 datapathConfiguration="&{false false false false false }" interface=lxc1d14190accb8 k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f929cce383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f929cce383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f929cce383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=54140 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f929cce383 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=54140 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f929cce383 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=54140 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f929cce383 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=54140 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=daemon level=info msg="Delete endpoint request" containerID=f929cce383 endpointID=2323 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f929cce383 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=54140 ipv4=10.0.0.134 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-333cfc5e-d4a2-4fed-bef4-ab8870d52fb1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 4b551651-2804-478d-83a2-eb33cf0d6aa9 default }" containerID=c35285beaa1dd740ddc5c2680d2aea2c1ebbd27bf08f8ba190d59a04a403f018 datapathConfiguration="&{false false false false false }" interface=lxc881ea8521b17 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c35285beaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c35285beaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c35285beaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=42259 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c35285beaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1706 identity=42259 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c35285beaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1706 identity=42259 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c35285beaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1706 identity=42259 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 1665e32c-014d-4ed4-bc57-dfc3d7faa607 default }" containerID=51f8dd25262189d55a23a7450d324bed6497bcbdd3af53f1cc5ba0f132dfe326 datapathConfiguration="&{false false false false false }" interface=lxc630b20f08177 k8sPodName=openstack/glance-db-init-5flrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51f8dd2526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51f8dd2526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51f8dd2526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=36352 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51f8dd2526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2993 identity=36352 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51f8dd2526 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2993 identity=36352 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=51f8dd2526 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=36352 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=51f8dd2526 endpointID=2993 k8sNamespace=openstack k8sPodName=glance-db-init-5flrm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a31bd096-e5a0-407c-b399-8707f63a81b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=51f8dd2526 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2993 identity=36352 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/glance-db-init-5flrm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 06053370-f157-4ea7-a4e5-af8df12c1041 default }" containerID=f052c2ceb3b73bb1b8326518674339708035dea24d21e5a217596b0768956a22 datapathConfiguration="&{false false false false false }" interface=lxc46276209b545 k8sPodName=openstack/glance-db-sync-ptpbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f052c2ceb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f052c2ceb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f052c2ceb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=10934 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f052c2ceb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1846 identity=10934 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f052c2ceb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1846 identity=10934 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f052c2ceb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1846 identity=10934 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 a65dfdae-47f8-46fb-afc0-ba0edcd2fbd8 default }" containerID=616d03ab04f3f81229acef9192ef4e72154e59dcbc0b970c93524007e602e786 datapathConfiguration="&{false false false false false }" interface=lxce228537eda9c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=616d03ab04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=616d03ab04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=616d03ab04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=15686 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=616d03ab04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1730 identity=15686 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 dbcf198c-5c6f-4cf2-b5f6-c88e1f593cdf default }" containerID=49097a899c81f0e85de5023c50a6fa92c184d09996845669bec010342768000e datapathConfiguration="&{false false false false false }" interface=lxc9e7081299c17 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49097a899c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49097a899c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49097a899c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=4488 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49097a899c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=4488 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=616d03ab04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1730 identity=15686 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj subsys=endpoint level=info msg="Successful endpoint creation" containerID=616d03ab04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1730 identity=15686 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-nrthj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=49097a899c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1288 identity=4488 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm subsys=endpoint level=info msg="Successful endpoint creation" containerID=49097a899c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=4488 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-dmxpm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f052c2ceb3 endpointID=1846 k8sNamespace=openstack k8sPodName=glance-db-sync-ptpbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=50821dfb-1b53-40fb-9ec0-264f62f659b4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f052c2ceb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1846 identity=10934 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-sync-ptpbq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 e8c90c64-1dc1-45f5-a3eb-fc43b66a75aa default }" containerID=02aeb729307ce8a7c49b860dd40fd110f73999c8c9ec203da6a3c6ed7dab3c8f datapathConfiguration="&{false false false false false }" interface=lxcd6f3167fa5b1 k8sPodName=openstack/glance-rabbit-init-tj6sl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=40600 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=40600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=02aeb72930 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2012 identity=40600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=endpoint level=info msg="Successful endpoint creation" containerID=02aeb72930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2012 identity=40600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=02aeb72930 endpointID=2012 k8sNamespace=openstack k8sPodName=glance-rabbit-init-tj6sl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9c45a346-6f79-41f7-a165-4f35141650a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=02aeb72930 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2012 identity=40600 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/glance-rabbit-init-tj6sl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 dfd093e1-5189-45fe-9dc0-a1361d42216f default }" containerID=2cf3dc699fa86523ce82c247e738581f6e580b90047eafd6940005294ef75a67 datapathConfiguration="&{false false false false false }" interface=lxcd3cd58b819ea k8sPodName=openstack/glance-ks-service-84spq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cf3dc699f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cf3dc699f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2cf3dc699f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=22627 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cf3dc699f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=22627 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2cf3dc699f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2561 identity=22627 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cf3dc699f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=22627 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2cf3dc699f endpointID=2561 k8sNamespace=openstack k8sPodName=glance-ks-service-84spq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f4d846a3-20b3-4a59-8359-edbba09605ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2cf3dc699f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=22627 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-84spq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 96061481-e6a1-40a1-b77e-5890d955dd90 default }" containerID=848d168c53807beb48d54c97307775be49bcf68c58ebde937730482833756343 datapathConfiguration="&{false false false false false }" interface=lxcce3cc62a8162 k8sPodName=openstack/glance-ks-endpoints-r4x87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=848d168c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3111 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=848d168c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3111 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c08688b4-d349-4d83-8297-2661661e62b9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c08688b4-d349-4d83-8297-2661661e62b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c08688b4-d349-4d83-8297-2661661e62b9;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c08688b4-d349-4d83-8297-2661661e62b9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=848d168c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3111 identity=33818 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c08688b4-d349-4d83-8297-2661661e62b9,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c08688b4-d349-4d83-8297-2661661e62b9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=848d168c53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3111 identity=33818 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=848d168c53 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3111 identity=33818 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=848d168c53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3111 identity=33818 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=848d168c53 endpointID=3111 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-r4x87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c08688b4-d349-4d83-8297-2661661e62b9 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c08688b4-d349-4d83-8297-2661661e62b9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=848d168c53 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3111 identity=33818 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/glance-ks-endpoints-r4x87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 10a7532c-c194-4668-a680-434a0f404230 default }" containerID=53c818e9eb681b30be89d4443c2782029d4169ff90abbf20d66bfd21cf37ec03 datapathConfiguration="&{false false false false false }" interface=lxc5ac5d707f50d k8sPodName=openstack/glance-ks-user-8mbnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53c818e9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53c818e9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53c818e9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=39042 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=53c818e9eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1405 identity=39042 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53c818e9eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1405 identity=39042 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=53c818e9eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=39042 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53c818e9eb endpointID=1405 k8sNamespace=openstack k8sPodName=glance-ks-user-8mbnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=65c56f89-7139-4313-a6b9-606ec3f9055b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=53c818e9eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1405 identity=39042 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-ks-user-8mbnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 4ed09ccb-e8b8-413f-b73b-645c4ad0732a default }" containerID=3e886b660826db7799de4edec5157985ba884a1d91f364388a4a13670a261add datapathConfiguration="&{false false false false false }" interface=lxcdd19e36e553c k8sPodName=openstack/glance-metadefs-load-gdwhm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=22242 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2623 identity=22242 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3e886b6608 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2623 identity=22242 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e886b6608 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=22242 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3e886b6608 endpointID=2623 k8sNamespace=openstack k8sPodName=glance-metadefs-load-gdwhm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=e9d2a44a-39c8-4c8a-9ecc-9b9e351fb02d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3e886b6608 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2623 identity=22242 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/glance-metadefs-load-gdwhm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 56e718b2-8c9f-4d77-bfcb-5e85c8cfb5de default }" containerID=cedc858ce0d10c3e6f56f72ebf2370e4df2494e446862340a72a98190192d3fa datapathConfiguration="&{false false false false false }" interface=lxc898024a7599f k8sPodName=openstack/glance-storage-init-7mjfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cedc858ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cedc858ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cedc858ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=32802 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cedc858ce0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=32802 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cedc858ce0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=32802 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=cedc858ce0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=32802 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=daemon level=info msg="Delete endpoint request" containerID=cedc858ce0 endpointID=866 k8sNamespace=openstack k8sPodName=glance-storage-init-7mjfs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ef6fa56d-5c26-42d3-9f8a-d9520b29f135 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cedc858ce0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=32802 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/glance-storage-init-7mjfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 33c681a5-8406-41e6-acde-381444d96b4c default }" containerID=5e9b2edf73f764f8d3ce134bd36f5f761f4f15b223b2cb504830a8a5a57372fd datapathConfiguration="&{false false false false false }" interface=lxc7a75319d03ef k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e9b2edf73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e9b2edf73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e9b2edf73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=27972 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5e9b2edf73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1076 identity=27972 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5e9b2edf73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1076 identity=27972 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e9b2edf73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1076 identity=27972 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-api-59dcc8c65c-ndbb8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.44 94015eae-1d09-480d-be22-e30bf80310cc default }" containerID=c3496860ef1f1e3aa68033de5d1d468a138265a3dad1e36e0d6945625bea7a38 datapathConfiguration="&{false false false false false }" interface=lxc373b852123e7 k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3496860ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3496860ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.217 20003552-83b7-4630-8db0-32331aa12373 default }" containerID=d26bb9be0ae82eb4a8b598ad2a3aa81c6170a2b4926e1277adc183c3dbe2bf21 datapathConfiguration="&{false false false false false }" interface=lxc5984006754d9 k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c3496860ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=16834 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3496860ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=16834 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=3835 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=3835 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 18112894-43dd-45c5-be85-7d48605d2e82 default }" containerID=9595a23a0a7bb19d8c0dfa5f2b9621ea7ff98633cca99b3e3a2716c7b6c52eab datapathConfiguration="&{false false false false false }" interface=lxc6174e495f0ae k8sPodName=openstack/staffeln-db-init-wg544 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9595a23a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9595a23a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9595a23a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=2987 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9595a23a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=477 identity=2987 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3496860ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3 identity=16834 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3496860ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=16834 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/staffeln-conductor-7fd7858bbc-2dsd9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d26bb9be0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=380 identity=3835 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=d26bb9be0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=380 identity=3835 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/staffeln-api-f95f849d4-sjkkw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9595a23a0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=477 identity=2987 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9595a23a0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=2987 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9595a23a0a endpointID=477 k8sNamespace=openstack k8sPodName=staffeln-db-init-wg544 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=05838f76-08f3-4dd2-9f4c-fa33726f2043 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=9595a23a0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=477 identity=2987 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-init-wg544 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 56321558-9ca4-4bac-a089-69ad7a98524b default }" containerID=2120d1f1877085c633dc46de5b1e94d6dfec0c4dcfb156a854153b347ef91032 datapathConfiguration="&{false false false false false }" interface=lxc52cc073cb3dc k8sPodName=openstack/staffeln-db-sync-xdkmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2120d1f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2120d1f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b221d685-0704-4352-bf13-fd634426b459,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b221d685-0704-4352-bf13-fd634426b459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b221d685-0704-4352-bf13-fd634426b459;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b221d685-0704-4352-bf13-fd634426b459;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2120d1f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=21721 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b221d685-0704-4352-bf13-fd634426b459,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b221d685-0704-4352-bf13-fd634426b459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2120d1f187 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2125 identity=21721 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2120d1f187 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2125 identity=21721 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=2120d1f187 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2125 identity=21721 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/staffeln-db-sync-xdkmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager