level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.177011ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="60.532µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.073997ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="12.261µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.149127ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="17.06µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="23.74µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="65.722µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.321µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="73.041µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="442.021µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=6.892567ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.436957ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.301µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.761µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="216.326µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="101.013µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.773µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=45.385101ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="128.984µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.401µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="6.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.193.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.153878ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="47.302µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.790231ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.72µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.186882ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.55µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="13.94µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="62.191µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="289.678µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.211µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="155.714µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="935.074µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="902.273µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.47µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="23.191µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.193 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.193 ipAddr.ipv6="" k8sNodeIP=199.19.213.193 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.193" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.1" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.193" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.193} {CiliumInternalIP 10.0.0.1}] 10.0.0.0/24 [] [] 10.0.0.60 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36073" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.494339151s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="25.24µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.54µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="66.162µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="33.371µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=982 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.560298365s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=302.711892ms file-path=/var/run/cilium/state/templates/ff9d32aaadf88f8354f20229a262aac85ff3b72b59099de9b757790be1c20040/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=982 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 ipv4=10.0.0.60 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identityLabels="reserved:health" ipv4=10.0.0.60 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3854 identity=4 identityLabels="reserved:health" ipv4=10.0.0.60 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 1e9960e8-2add-4341-b2f9-091cbf2e2831 default }" containerID=b3069fa733723846fad30bd87c9366f6cbe36bd7ec39aa03127b01bb55dfc549 datapathConfiguration="&{false false false false false }" interface=lxc7a81b26121cf k8sPodName=kube-system/coredns-7c96b6546b-j98l6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3069fa733 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3069fa733 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.58 845b0bc7-bcc1-4dc9-a140-f347b55aa075 default }" containerID=218f3ef7c5996b63753c23962e17bd27bab6973c37a18fb375edcb9e50c99154 datapathConfiguration="&{false false false false false }" interface=lxc3931de345a8c k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b3069fa733 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=26058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3069fa733 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1197 identity=26058 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=23603 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3015 identity=23603 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.10020612s file-path=/var/run/cilium/state/templates/bacc7d60c10df8fe9b7f01148ee3fdeff690376a6ddfc3ae42da3af20813022e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3854 identity=4 ipv4=10.0.0.60 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3069fa733 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1197 identity=26058 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=218f3ef7c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3015 identity=23603 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3069fa733 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1197 identity=26058 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=daemon level=info msg="Successful endpoint creation" containerID=218f3ef7c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3015 identity=23603 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=218f3ef7c5 endpointID=3015 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-nk4z6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=cc5ea681-1c30-446d-9355-b24b1df06357 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=218f3ef7c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3015 identity=23603 ipv4=10.0.0.58 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-nk4z6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 657234de-1cc8-49cc-9a1a-4e8d9d696fc9 default }" containerID=7f506b88c6e9468dfb37ac5752b25da5cedda86f2184ec0706e542df1b7a631a datapathConfiguration="&{false false false false false }" interface=lxcac63f1ddab43 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f506b88c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f506b88c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f506b88c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=40161 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7f506b88c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=380 identity=40161 ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f506b88c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=380 identity=40161 ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f506b88c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=380 identity=40161 ipv4=10.0.0.19 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ffxcw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=982 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00982 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00982 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00982 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00982:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=982 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 c3f58c79-6d93-4abe-9bf1-da0524580eb1 default }" containerID=2c6f4ef74d8e717aeabd7878d6472b04c9f15f8197a8d45e5c24b125200ad5f4 datapathConfiguration="&{false false false false false }" interface=lxc4496f4b52eff k8sPodName=kube-system/coredns-67659f764b-tsnhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c6f4ef74d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c6f4ef74d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 44149fe1-42c3-476c-8a3c-41db12e4a35f default }" containerID=4068b27dfc2810f22e01fab267f6d1f8748cc37e68783f999720e98bc03fb5e6 datapathConfiguration="&{false false false false false }" interface=lxcbc663bee3077 k8sPodName=kube-system/coredns-67659f764b-bns44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4068b27dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2c6f4ef74d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=26058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c6f4ef74d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2190 identity=26058 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4068b27dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4068b27dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=26058 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4068b27dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=512 identity=26058 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c6f4ef74d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2190 identity=26058 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c6f4ef74d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2190 identity=26058 ipv4=10.0.0.193 ipv6= k8sPodName=kube-system/coredns-67659f764b-tsnhp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4068b27dfc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=512 identity=26058 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4068b27dfc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=512 identity=26058 ipv4=10.0.0.243 ipv6= k8sPodName=kube-system/coredns-67659f764b-bns44 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 3418a658-aa1f-4c94-b702-9c8a58956247 default }" containerID=f5904c9534ac68e13e2d33f613af010b4a43ba1635e2590d3f59d0d87e543156 datapathConfiguration="&{false false false false false }" interface=lxc006107fd2cde k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=12340 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=12340 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5904c9534 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=204 identity=12340 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5904c9534 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=204 identity=12340 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ckd9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3069fa733 endpointID=1197 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-j98l6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=b3069fa733 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1197 identity=26058 ipv4=10.0.0.111 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-j98l6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 4fdd96fb-ed62-4914-809d-4c147425ff46 default }" containerID=88bbf3cf9d27b1913eaa42c503aab49073fcc29e7d8ad10423bcd8562bb6dede datapathConfiguration="&{false false false false false }" interface=lxcd5d5adb43ecb k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.46 9e7b3894-dec9-4649-8cf7-8c00bfb1b111 default }" containerID=473460071d2ae1133b074d18072cf1ac6121b40b7465869ac3e7761ae680b6cc datapathConfiguration="&{false false false false false }" interface=lxc5410311be896 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp subsys=endpoint level=info msg="New endpoint" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 4ebc2c0e-8df9-4975-ada8-87947b820bea default }" containerID=1bb32be5bb1da7548ee304e6225fa9e1d58af8ad21f58669ea8d7f25ba8b4ad5 datapathConfiguration="&{false false false false false }" interface=lxc8b0a248d0835 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1148 identity=9025 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1148 identity=9025 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=54007 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=54007 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=32223 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=32223 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=473460071d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1148 identity=9025 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl subsys=endpoint level=info msg="Successful endpoint creation" containerID=473460071d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1148 identity=9025 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-fq9zl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1bb32be5bb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2297 identity=32223 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bb32be5bb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=32223 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9vl78 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=88bbf3cf9d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2399 identity=54007 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=88bbf3cf9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2399 identity=54007 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-49fxp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.169 8db2ece7-c7e6-4e4e-8bae-a0c14894334e default }" containerID=ffac92eebebeb7462f3b266d7c636972de4b25fe024cdeddbe4155bc18da843b datapathConfiguration="&{false false false false false }" interface=lxc2af96e3f8034 k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffac92eebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffac92eebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffac92eebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=41139 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffac92eebe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3898 identity=41139 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ffac92eebe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3898 identity=41139 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffac92eebe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3898 identity=41139 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ffac92eebe endpointID=3898 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-c59wv subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=b6047d3d-cdb1-4434-a9a3-32430fdf6a1b k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ffac92eebe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3898 identity=41139 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c59wv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 1f95d6d6-1220-4cb6-a24a-21222e7d0a8c default }" containerID=d3d109cb0edc08a989ba778304c8afa636d626665d599a8b90e18485247ed2e0 datapathConfiguration="&{false false false false false }" interface=lxc9ac6666e5606 k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d3d109cb0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d3d109cb0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d3d109cb0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=49200 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d3d109cb0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=49200 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d3d109cb0e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1700 identity=49200 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d3d109cb0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1700 identity=49200 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d3d109cb0e endpointID=1700 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-j6s98 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bcb85c1c-3377-469f-a0bb-d4529485922d k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d3d109cb0e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1700 identity=49200 ipv4=10.0.0.11 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-j6s98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 fe2ff6bf-d784-40a5-95c7-fd11e573e547 default }" containerID=87bba3999ec670cce808c116b14b68750e3b94e72f21aea1238494791695e644 datapathConfiguration="&{false false false false false }" interface=lxce346c39cb593 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87bba3999e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87bba3999e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87bba3999e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=64527 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87bba3999e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=354 identity=64527 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=87bba3999e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=354 identity=64527 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=87bba3999e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=354 identity=64527 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2vz4g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.226 da4e3cae-1451-4d3e-9b7e-ecad266d8931 default }" containerID=6e2bdec2c12182d371fcf505c49ea1238759b23d36e191d21dc2c0e07f708b7e datapathConfiguration="&{false false false false false }" interface=lxc287c57c05fea k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e2bdec2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e2bdec2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e2bdec2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=48423 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e2bdec2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=48423 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e2bdec2c1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=615 identity=48423 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e2bdec2c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=615 identity=48423 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e2bdec2c1 endpointID=615 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-mswkt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=99959900-ec59-471b-80d7-5ee8aaf67535 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6e2bdec2c1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=615 identity=48423 ipv4=10.0.0.226 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-mswkt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c067f6bc-12b0-4ec6-b009-f6f1c9edb900] Description:}]" policyAddRequest=a06e4d90-ce8c-429b-83f5-65fb2cfa0523 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a06e4d90-ce8c-429b-83f5-65fb2cfa0523 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=bd33cbf6-93c9-4451-9976-1d160f1c1a24] Description:}]" policyAddRequest=c3f9931e-8a93-4b2b-8bc9-a72038321008 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c3f9931e-8a93-4b2b-8bc9-a72038321008 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.122 2badabf6-53ac-4786-a4bd-e5cd78acb423 default }" containerID=eceb314fd75950ec63c43bc4e962a299a22a184f6b487a35f30ad3c3f80b40a2 datapathConfiguration="&{false false false false false }" interface=lxce7dd54f817dc k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=6200 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=525 identity=6200 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eceb314fd7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=525 identity=6200 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw subsys=endpoint level=info msg="Successful endpoint creation" containerID=eceb314fd7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=525 identity=6200 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-pzjbw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 be71cc7b-19cc-4735-b0c7-1e2173304059 default }" containerID=3c6bc39321d04df3d9c7f54d3f7d4c528299f26930b09d566baac67ab44d3d7d datapathConfiguration="&{false false false false false }" interface=lxc65ff140da6cf k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c6bc39321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c6bc39321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c6bc39321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=8881 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c6bc39321 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=8881 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c6bc39321 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=795 identity=8881 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c6bc39321 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=795 identity=8881 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-6wb6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.241 d1b01282-1b8e-467e-b3c8-4ff7e2f8f554 default }" containerID=eb6c5f44eff8c9efe8b486766110cfdc30e3166a7c3f42273ac73f048a32cce3 datapathConfiguration="&{false false false false false }" interface=lxc7f84dfacc582 k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb6c5f44ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb6c5f44ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb6c5f44ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identity=14714 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb6c5f44ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3454 identity=14714 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb6c5f44ef datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3454 identity=14714 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb6c5f44ef datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3454 identity=14714 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7tkhj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.57 dc2ed6ce-709f-49e9-a6de-f712295d4cc9 default }" containerID=1cf1214a3fa4ea7770a67167d0d3246736ca30d11b9fc60460a0c3aa7f7778a4 datapathConfiguration="&{false false false false false }" interface=lxce297bc0d3b70 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=6980 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1213 identity=6980 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 732a5c4a-b8a4-4eb4-b379-efc2fbef3fff default }" containerID=789af1733759785756e1576c9edd03367edecb01485d364fa0efbe8c36b799a0 datapathConfiguration="&{false false false false false }" interface=lxcd7157e1a8d9b k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=789af17337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=789af17337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=789af17337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=789af17337 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1269 identity=23017 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cf1214a3f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1213 identity=6980 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cf1214a3f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1213 identity=6980 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=789af17337 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1269 identity=23017 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=789af17337 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1269 identity=23017 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=789af17337 endpointID=1269 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=789af17337 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1269 identity=23017 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5392065d-e3c6-4d7a-857c-6b9d4b88d4a8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 b37add46-a34c-43c8-8dd7-2b66bd967887 default }" containerID=3b7d380a8c995b74303e6c0d02ce0865205fd81794f3863e9cb8419e360e1ee8 datapathConfiguration="&{false false false false false }" interface=lxc83c3c6645ca1 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b7d380a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b7d380a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b7d380a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=346 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b7d380a8c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2013 identity=346 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3b7d380a8c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2013 identity=346 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b7d380a8c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2013 identity=346 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0dc50339-500c-4618-9e4b-1a0cd445af39] Description:}]" policyAddRequest=a5ff64c8-fb6a-4402-b4fe-795bf4631bba subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a5ff64c8-fb6a-4402-b4fe-795bf4631bba policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.125 1dc07813-e13a-4ea0-8b20-5ec9d959df85 default }" containerID=055d681387d2dec915bf5f8c889d7f70d18a5b264d4c5cad98a983d413e0f238 datapathConfiguration="&{false false false false false }" interface=lxc66fe103ac53f k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=055d681387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=055d681387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=055d681387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=055d681387 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2326 identity=23017 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=055d681387 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2326 identity=23017 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=055d681387 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2326 identity=23017 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=daemon level=info msg="Delete endpoint request" containerID=055d681387 endpointID=2326 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=055d681387 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2326 identity=23017 ipv4=10.0.0.125 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cf3e5a48-135e-42af-adf6-a4863f02a6e0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 30c4ba70-4fdd-4909-afd7-163af42bf46c default }" containerID=a51b5cd4e2c2aaef2ce53f5b1cda6ea5ce83a938dc096726ee13794416b4bd12 datapathConfiguration="&{false false false false false }" interface=lxc51a2f1111b37 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a51b5cd4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a51b5cd4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a51b5cd4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=11143 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a51b5cd4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=11143 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a51b5cd4e2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3213 identity=11143 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a51b5cd4e2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3213 identity=11143 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2c5eef0e-83f2-47f1-a83a-4e7f5404dd68] Description:}]" policyAddRequest=b68ce087-ff3e-49e9-a6e0-35b376544f30 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=b68ce087-ff3e-49e9-a6e0-35b376544f30 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.151 a9b236b0-d29d-4fdf-a236-20806a3afea5 default }" containerID=f8e6d7c3548a88405645e46a8e433aea8853b112750b3bba848e90ef40b39b13 datapathConfiguration="&{false false false false false }" interface=lxc87d2d1114599 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=56453 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=56453 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f8e6d7c354 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3375 identity=56453 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8e6d7c354 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3375 identity=56453 ipv4=10.0.0.151 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009238843724214428 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.4 dd9cee0f-28f2-4748-baef-4c3a79aecacd default }" containerID=14128dc2cd7b22279249ecd649b6b0cedf71df756872324a3fdebf5f3a8e2374 datapathConfiguration="&{false false false false false }" interface=lxcf85ab89ef290 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.28 677f1b42-9020-4f55-b7d7-b34148f8b8c9 default }" containerID=cb0f69dec4317c3d5dc07d824bd802b41ed991d839d4b5bb7fd2cea2d7a25745 datapathConfiguration="&{false false false false false }" interface=lxc798e265a65ed k8sPodName=monitoring/node-feature-discovery-worker-9jjfv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14128dc2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 f3238ec9-802f-4a1f-ad64-ae523b39824c default }" containerID=7a110f76e60029c2b396701333b7a249aa33485235863420148f266a2fdf13b9 datapathConfiguration="&{false false false false false }" interface=lxc3b2951d3648f k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14128dc2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj subsys=endpoint level=info msg="New endpoint" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14128dc2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=61427 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14128dc2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=415 identity=61427 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=2440 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=782 identity=2440 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=15271 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=613 identity=15271 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14128dc2cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=415 identity=61427 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=14128dc2cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=415 identity=61427 ipv4=10.0.0.4 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4lfjj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cb0f69dec4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=782 identity=2440 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb0f69dec4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=782 identity=2440 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-9jjfv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7a110f76e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=613 identity=15271 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a110f76e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=613 identity=15271 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-96sd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 cfd6ae8a-be62-4b69-a199-965e444ba942 default }" containerID=04e9dcc2dc820ba2fcce92ee4685117538d30f96fcfc9833b77a0f9d386c0bb7 datapathConfiguration="&{false false false false false }" interface=lxcdeb68262712f k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e9dcc2dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e9dcc2dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04e9dcc2dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=12365 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e9dcc2dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1797 identity=12365 ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=04e9dcc2dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1797 identity=12365 ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e9dcc2dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1797 identity=12365 ipv4=10.0.0.20 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-b829c subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=982 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00982 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00982 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00982 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00982:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=982 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 b67f7907-af6a-43f7-9951-50510106e06f default }" containerID=9e39269250b62806b7dee28fc0f498562eb6b9b4eebadf01938d2de6be7331c4 datapathConfiguration="&{false false false false false }" interface=lxcc7bf6780fc72 k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e39269250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e39269250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=9e39269250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=14978 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e39269250 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=589 identity=14978 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e39269250 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=589 identity=14978 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e39269250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=14978 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=daemon level=info msg="Delete endpoint request" containerID=9e39269250 endpointID=589 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-2xsgs subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=7e7a1676-9a34-4ea5-ac31-e9c3c011cb52 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9e39269250 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=589 identity=14978 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-2xsgs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 c110cd1b-91e5-4cab-aa7f-7c04310fa030 default }" containerID=94706134782e675ab2997d82cc338f2aa87b3d502c9a1716254dc22d0b472281 datapathConfiguration="&{false false false false false }" interface=lxc3e137ff3335d k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=38695 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=38695 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.104 bf48c9d8-2ab1-4a48-96ca-ebafd44b8a50 default }" containerID=fa7a37f3813e79fb4e393be3978785baea3f62ae261fef8c2ec37c9f6fd0d283 datapathConfiguration="&{false false false false false }" interface=lxc984f538e36e4 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa7a37f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa7a37f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa7a37f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=24381 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa7a37f381 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=444 identity=24381 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9470613478 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=38695 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=9470613478 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=38695 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-57dbc4b64b-7nrqr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 4d85c96d-57e0-45df-88e8-4791b14fc729 default }" containerID=a6ddd84e0dd1f1cd431a44a546a8483ba0d474d47a21f4e424b58744e403c2ba datapathConfiguration="&{false false false false false }" interface=lxcadbf27153fcd k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6ddd84e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6ddd84e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6ddd84e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=5449 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6ddd84e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3810 identity=5449 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa7a37f381 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=444 identity=24381 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa7a37f381 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=444 identity=24381 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mbjlc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a6ddd84e0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3810 identity=5449 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6ddd84e0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3810 identity=5449 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-shwnz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 051d731c-0f34-42cb-887f-018fad9335f7 default }" containerID=89262572a1c08f24fe7935f1fabcdb2fa390828f18346cc9a8e8dd61ee6d05f4 datapathConfiguration="&{false false false false false }" interface=lxc26ae99bc15af k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89262572a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89262572a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89262572a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=1479 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89262572a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=1479 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=89262572a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=827 identity=1479 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=89262572a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=1479 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=89262572a1 endpointID=827 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-zsgx2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=584bad60-a04e-4c12-9a2c-ba5428c82a52 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=89262572a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=827 identity=1479 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-zsgx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 fbbc0c84-0d4a-474b-bcb4-4442b691aae6 default }" containerID=8391f862eb24e5c23f07e69982e66a68df84b705189abfefcbd93ffb26a3255c datapathConfiguration="&{false false false false false }" interface=lxcf8a06bce8107 k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8391f862eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8391f862eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8391f862eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8391f862eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=23017 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8391f862eb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2638 identity=23017 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8391f862eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2638 identity=23017 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 ad16de60-6a6b-49a8-addf-85da3fc67235 default }" containerID=19a6fac32ab94fb9844f3c8b30c7d21fe6bd1d2ef6a883c436731468ab152b3d datapathConfiguration="&{false false false false false }" interface=lxcededab602251 k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a6fac32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a6fac32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=19a6fac32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a6fac32a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=23017 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a6fac32a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3962 identity=23017 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a6fac32a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=23017 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=daemon level=info msg="Delete endpoint request" containerID=8391f862eb endpointID=2638 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=19a6fac32a endpointID=3962 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8391f862eb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2638 identity=23017 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cbe2f7f1-fdbe-4147-8381-3a71ac716d26 subsys=endpoint level=info msg="Removed endpoint" containerID=19a6fac32a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=23017 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5402cdb8-2a41-4aa7-9cd3-01263a9159a6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 2906a65b-4abf-47d3-8a34-d73dce2a3cc5 default }" containerID=3c37fb269c7881a9cb6b7ac7ad47f3e0fda7b06146085b5a17f2d2cb71f695a7 datapathConfiguration="&{false false false false false }" interface=lxca3d3689f8b40 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c37fb269c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c37fb269c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c37fb269c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 identity=9109 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c37fb269c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3613 identity=9109 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c37fb269c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3613 identity=9109 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c37fb269c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3613 identity=9109 ipv4=10.0.0.137 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.70 65a433b7-5c33-4a56-8508-840eee905ee5 default }" containerID=77030bcadb242bb130fcbb1c4a7e11021d179455532151ab1575c903bf1a95c1 datapathConfiguration="&{false false false false false }" interface=lxc4429ef87b771 k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77030bcadb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77030bcadb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77030bcadb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=4543 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77030bcadb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2783 identity=4543 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 fe9cf09c-35d4-41c7-bdb3-e44a669ec1d0 default }" containerID=3742c3aebf03aa7ac0e4ae9b8b46b1e188c8acba707681bc57e924c6849ba8cc datapathConfiguration="&{false false false false false }" interface=lxce7b8f952151a k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3742c3aebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3742c3aebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3742c3aebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identity=1310 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3742c3aebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2589 identity=1310 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77030bcadb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2783 identity=4543 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77030bcadb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2783 identity=4543 ipv4=10.0.0.70 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-jj8z4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.227 6ae92009-d6a3-4a7a-baf1-7bfb13a86956 default }" containerID=055bfab73b3c91306c84053b2a713cdaff5edd460ffddfa10b06723089160d28 datapathConfiguration="&{false false false false false }" interface=lxc7d6999585fcc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=055bfab73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=055bfab73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=055bfab73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=5533 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=055bfab73b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=941 identity=5533 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3742c3aebf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2589 identity=1310 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3742c3aebf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2589 identity=1310 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=055bfab73b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=941 identity=5533 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=055bfab73b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=941 identity=5533 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 3faa3a00-9b91-407e-97df-78e7d6d3bc88 default }" containerID=ababcf7040b4cdd48ac45560112766202c06088f8d311abbe2252343b71c9db4 datapathConfiguration="&{false false false false false }" interface=lxce240b27c1c65 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ababcf7040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ababcf7040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ababcf7040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=19502 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ababcf7040 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=341 identity=19502 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ababcf7040 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=341 identity=19502 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ababcf7040 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=341 identity=19502 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 746c31c9-e668-4979-8bd3-19ceb3fd4a1a default }" containerID=c54fa28200a24360085df4ff759afb04e3d6fb854e6a633c11070803afaaf8a9 datapathConfiguration="&{false false false false false }" interface=lxc61699bb789c3 k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c54fa28200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c54fa28200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c54fa28200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c54fa28200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3586 identity=23017 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c54fa28200 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3586 identity=23017 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=endpoint level=info msg="Successful endpoint creation" containerID=c54fa28200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=23017 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 777def1a-e68e-44b4-9084-fbd8bc5c4dfc default }" containerID=6713d1130231480394f50916d0f122954592387097d8688180be9fba10ce90ba datapathConfiguration="&{false false false false false }" interface=lxc460571191af4 k8sPodName=monitoring/vector-jpws7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6713d11302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6713d11302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6713d11302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=51609 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6713d11302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=51609 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6713d11302 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=872 identity=51609 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6713d11302 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=51609 ipv4=10.0.0.58 ipv6= k8sPodName=monitoring/vector-jpws7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c54fa28200 endpointID=3586 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c54fa28200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3586 identity=23017 ipv4=10.0.0.173 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-00e54161-a920-4495-b0c4-d0f1c995debe subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 a80cd353-4c9f-46e0-bc99-bc62b8aa6e1d default }" containerID=ba33163480f9badb51c63f56721ecc20e6b930c976629c9287178ee134cdeaff datapathConfiguration="&{false false false false false }" interface=lxcc328903e98a1 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba33163480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba33163480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba33163480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=56730 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ba33163480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=773 identity=56730 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba33163480 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=773 identity=56730 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba33163480 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=773 identity=56730 ipv4=10.0.0.87 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 b96ceb03-485f-483d-b3c0-6b082eeaf020 default }" containerID=15468f48fe9d5d2aeddc0b2d8e90ae6ae1ec8b2f81d48708690a56658e2aab97 datapathConfiguration="&{false false false false false }" interface=lxc391dcb91734a k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15468f48fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15468f48fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15468f48fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=14930 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15468f48fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=14930 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15468f48fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1688 identity=14930 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c subsys=endpoint level=info msg="Successful endpoint creation" containerID=15468f48fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1688 identity=14930 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-c5l7c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 1ddce564-2819-467c-a2fa-a8754b12a229 default }" containerID=8a9979357a7c912afa3ee193862132f7bed70403ed4f5f203d3fa91ffd470ab8 datapathConfiguration="&{false false false false false }" interface=lxc49ae93e0d695 k8sPodName=openstack/memcached-memcached-6479589586-q48jn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a9979357a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a9979357a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a9979357a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=37482 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8a9979357a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1528 identity=37482 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a9979357a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1528 identity=37482 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a9979357a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1528 identity=37482 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-q48jn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.56 0d865092-1986-439e-be17-2f557317f1a7 default }" containerID=7bc493cbe3743049a890737b50760dcd14ff094d472534822d4fb4610732df6c datapathConfiguration="&{false false false false false }" interface=lxcc4f71f6b83ad k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bc493cbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bc493cbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bc493cbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bc493cbe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=23017 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bc493cbe3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=397 identity=23017 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bc493cbe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=23017 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=daemon level=info msg="Delete endpoint request" containerID=7bc493cbe3 endpointID=397 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7bc493cbe3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=397 identity=23017 ipv4=10.0.0.56 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b0e243a-e15d-4e3a-8b7a-2aa370b250bf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 14f701e4-0cee-4944-a716-a11e8267d5b7 default }" containerID=b4baf778ab6b216ca3d421670ec5e6fe7b294c75bc56bcacd135d55b93df0b88 datapathConfiguration="&{false false false false false }" interface=lxc741180d26e06 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4baf778ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4baf778ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4baf778ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=46867 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4baf778ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=725 identity=46867 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b4baf778ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=725 identity=46867 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4baf778ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=725 identity=46867 ipv4=10.0.0.111 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.217 4c69df68-d055-45bc-9584-5e0dd5f18ea5 default }" containerID=402659c4724e03131a366552f86512f30740ede871c94abc21747b3195709bdb datapathConfiguration="&{false false false false false }" interface=lxcc3425d8167a2 k8sPodName=openstack/keystone-api-6649766fdd-wsjrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=402659c472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=402659c472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=402659c472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=24827 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=402659c472 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=24827 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 411e6ed5-bd0b-4e29-bb39-17480f7006de default }" containerID=a9d435d4f300a57d3983f20da7dbbaa4f4811a2f78b7ee90b84939070063b1bb datapathConfiguration="&{false false false false false }" interface=lxcb4705cddd7b6 k8sPodName=openstack/keystone-credential-setup-95ttk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9d435d4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9d435d4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9d435d4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identity=59118 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9d435d4f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1849 identity=59118 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=402659c472 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=14 identity=24827 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=402659c472 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=14 identity=24827 ipv4=10.0.0.217 ipv6= k8sPodName=openstack/keystone-api-6649766fdd-wsjrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9d435d4f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1849 identity=59118 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9d435d4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1849 identity=59118 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9d435d4f3 endpointID=1849 k8sNamespace=openstack k8sPodName=keystone-credential-setup-95ttk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=2ff48afd-f2c1-45be-a0e2-d09c027877d8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a9d435d4f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1849 identity=59118 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-credential-setup-95ttk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 e8560475-acaf-4598-a4a3-144fa9924ec9 default }" containerID=2a51b0a4e26b9991537936978bb61b6e85b967f9f78c2e162376587b5ad7538c datapathConfiguration="&{false false false false false }" interface=lxc307001ad3c09 k8sPodName=openstack/keystone-db-init-wf9jt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e58487c-7e14-43aa-86ab-491867e28622,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1e58487c-7e14-43aa-86ab-491867e28622,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1e58487c-7e14-43aa-86ab-491867e28622;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1e58487c-7e14-43aa-86ab-491867e28622;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=4633 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e58487c-7e14-43aa-86ab-491867e28622,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1e58487c-7e14-43aa-86ab-491867e28622,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1418 identity=4633 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a51b0a4e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1418 identity=4633 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a51b0a4e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1418 identity=4633 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a51b0a4e2 endpointID=1418 k8sNamespace=openstack k8sPodName=keystone-db-init-wf9jt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1e58487c-7e14-43aa-86ab-491867e28622 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1e58487c-7e14-43aa-86ab-491867e28622 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2a51b0a4e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1418 identity=4633 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-db-init-wf9jt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 dbc818aa-a85f-4036-bf9a-ee6b0dfc0947 default }" containerID=2161c7617827c9bde000f6e3945f356cb613ca887390a16b6d886d90e5088988 datapathConfiguration="&{false false false false false }" interface=lxcd320f3142ea9 k8sPodName=openstack/keystone-fernet-setup-mq7td labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=1078 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3519 identity=1078 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2161c76178 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3519 identity=1078 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=endpoint level=info msg="Successful endpoint creation" containerID=2161c76178 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=1078 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2161c76178 endpointID=3519 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mq7td subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=d1c79cca-7f43-4c48-b677-d8c9830ee7a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2161c76178 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3519 identity=1078 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/keystone-fernet-setup-mq7td subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 6258b120-0c4f-4fe4-9f33-572db91c48c5 default }" containerID=5a8983811a4cd81d58dfb3af7e590ab32280432acc24009b2b3332d289e6c56f datapathConfiguration="&{false false false false false }" interface=lxcb132a213c6a4 k8sPodName=openstack/keystone-db-sync-7jnmm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a8983811a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a8983811a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5a8983811a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=43542 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a8983811a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=789 identity=43542 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a8983811a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=789 identity=43542 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a8983811a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=43542 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a8983811a endpointID=789 k8sNamespace=openstack k8sPodName=keystone-db-sync-7jnmm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=a5025a7d-2996-4a90-87eb-b8194a17d941 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5a8983811a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=789 identity=43542 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/keystone-db-sync-7jnmm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 bbde3487-a8a8-45c8-bfb8-ba19211ef9ff default }" containerID=197d3b875521d636eac24426d07ff28c306d929390e097a45fdec7d51eb41b90 datapathConfiguration="&{false false false false false }" interface=lxc56d09fa40142 k8sPodName=openstack/keystone-rabbit-init-6t4np labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=197d3b8755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=197d3b8755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=197d3b8755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=61542 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=197d3b8755 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=61542 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=197d3b8755 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1745 identity=61542 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=endpoint level=info msg="Successful endpoint creation" containerID=197d3b8755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=61542 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=197d3b8755 endpointID=1745 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6t4np subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b43bb0d6-7aca-47cd-8a23-f7f3b1275315 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=197d3b8755 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=61542 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/keystone-rabbit-init-6t4np subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 3b324ee2-8dbc-435b-92dd-cc5619c44cd4 default }" containerID=91dbbba373ebf8c164ac4c28d1d8f7eb593c486ebfbc0c235f86098b6fbb539c datapathConfiguration="&{false false false false false }" interface=lxc7bec2b0b8d1b k8sPodName=openstack/keystone-domain-manage-t7jmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91dbbba373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91dbbba373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=91dbbba373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=20579 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91dbbba373 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2321 identity=20579 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91dbbba373 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2321 identity=20579 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=91dbbba373 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2321 identity=20579 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=daemon level=info msg="Delete endpoint request" containerID=91dbbba373 endpointID=2321 k8sNamespace=openstack k8sPodName=keystone-domain-manage-t7jmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=dcbcfc50-7315-4a5f-9c98-bcaa2397a241 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91dbbba373 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2321 identity=20579 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-domain-manage-t7jmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 d80820d0-b314-40e7-9ffb-2a442e10a336 default }" containerID=d09e06c3345ebbfd9aa70e6879c5b8a53c73fd2ad401078b76bada8f4fc5c070 datapathConfiguration="&{false false false false false }" interface=lxcd8bce434b615 k8sPodName=openstack/keystone-bootstrap-t6v6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d09e06c334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d09e06c334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb38f491-2044-494b-928e-754c942a4c5b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eb38f491-2044-494b-928e-754c942a4c5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eb38f491-2044-494b-928e-754c942a4c5b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=eb38f491-2044-494b-928e-754c942a4c5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d09e06c334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=46559 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eb38f491-2044-494b-928e-754c942a4c5b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=eb38f491-2044-494b-928e-754c942a4c5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d09e06c334 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1309 identity=46559 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d09e06c334 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1309 identity=46559 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=d09e06c334 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1309 identity=46559 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d09e06c334 endpointID=1309 k8sNamespace=openstack k8sPodName=keystone-bootstrap-t6v6b subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eb38f491-2044-494b-928e-754c942a4c5b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=eb38f491-2044-494b-928e-754c942a4c5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d09e06c334 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1309 identity=46559 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-bootstrap-t6v6b subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03397608451580613 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.48 24151b41-1ae4-48aa-ad85-aa7f7c46461e default }" containerID=6ad7d34a3f8609d69f47cdf80eae3b5e75cd74708ccaf93fa565abdd6f64dfc8 datapathConfiguration="&{false false false false false }" interface=lxc4a1c90783421 k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ad7d34a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ad7d34a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ad7d34a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ad7d34a3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=23017 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ad7d34a3f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3288 identity=23017 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ad7d34a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=23017 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=daemon level=info msg="Delete endpoint request" containerID=6ad7d34a3f endpointID=3288 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6ad7d34a3f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=23017 ipv4=10.0.0.48 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1ea91df-5e18-4082-be6c-14c7214e79f1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 2775d321-a9b3-4830-a19f-5a8194ad30ec default }" containerID=ae15cfdc7ccf1703ae3bc11d953ff377877b27ba10e5f1d6bd9000b77fe0971f datapathConfiguration="&{false false false false false }" interface=lxca9e0bce4b395 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae15cfdc7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae15cfdc7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae15cfdc7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=44294 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae15cfdc7c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=44294 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae15cfdc7c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=44294 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae15cfdc7c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=44294 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.53 504b1ae7-cf42-46a0-b344-c0ea0c39f914 default }" containerID=f1776d993f86b6644bd3b5ef83d5d5fe8b921eedf927cc41e18abc49b36286a8 datapathConfiguration="&{false false false false false }" interface=lxc690a93e1e02e k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=39692 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1906 identity=39692 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 bfafc4a3-3248-4c7b-b60f-71631c15adc2 default }" containerID=2a4ebce2c49f30011a713f8a35cd41d84431fb4f183da708047ba1316d27d34f datapathConfiguration="&{false false false false false }" interface=lxca2759114eeec k8sPodName=openstack/barbican-db-init-95jps labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a4ebce2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a4ebce2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a4ebce2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=24683 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a4ebce2c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4071 identity=24683 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f1776d993f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1906 identity=39692 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1776d993f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1906 identity=39692 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/barbican-api-65bc69bcb9-gcn4c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2a4ebce2c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4071 identity=24683 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a4ebce2c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4071 identity=24683 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2a4ebce2c4 endpointID=4071 k8sNamespace=openstack k8sPodName=barbican-db-init-95jps subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=f18f9be6-2369-48ae-8a7b-6c1b276ff684 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2a4ebce2c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4071 identity=24683 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-db-init-95jps subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 5f01c3d4-bd21-4e70-97b1-6effa877405b default }" containerID=ce612add958bc9a0924ec7d793c80c33f9492ca518f45deff263946137230719 datapathConfiguration="&{false false false false false }" interface=lxc38273d594fc7 k8sPodName=openstack/barbican-db-sync-qkqvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce612add95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce612add95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ce612add95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identity=23371 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce612add95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3387 identity=23371 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce612add95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3387 identity=23371 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce612add95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3387 identity=23371 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ce612add95 endpointID=3387 k8sNamespace=openstack k8sPodName=barbican-db-sync-qkqvs subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=86944f5f-b4f7-4fba-8a67-983782e47b8b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ce612add95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3387 identity=23371 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-qkqvs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 7ecc195a-fde5-4af1-991c-85b714b2ed72 default }" containerID=19a2c87385fc7268698861521aa08e6478105d56e6890c1068737f1eec27c9a0 datapathConfiguration="&{false false false false false }" interface=lxc704f082ea739 k8sPodName=openstack/barbican-rabbit-init-wfknn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19a2c87385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19a2c87385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6619ab76-42f1-4645-9374-592611923b5e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6619ab76-42f1-4645-9374-592611923b5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6619ab76-42f1-4645-9374-592611923b5e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6619ab76-42f1-4645-9374-592611923b5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19a2c87385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=12996 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6619ab76-42f1-4645-9374-592611923b5e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6619ab76-42f1-4645-9374-592611923b5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19a2c87385 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=12996 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19a2c87385 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2416 identity=12996 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=endpoint level=info msg="Successful endpoint creation" containerID=19a2c87385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=12996 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19a2c87385 endpointID=2416 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-wfknn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6619ab76-42f1-4645-9374-592611923b5e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6619ab76-42f1-4645-9374-592611923b5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=19a2c87385 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=12996 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/barbican-rabbit-init-wfknn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 dbfb1be7-c219-436c-85b0-ea83476006ed default }" containerID=df3baa9a6ca829e33c0794a76f39ab898d072ee72fdecb6705e4656c26e64a06 datapathConfiguration="&{false false false false false }" interface=lxce9fda5a0ea30 k8sPodName=openstack/barbican-ks-service-ccxhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df3baa9a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df3baa9a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df3baa9a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=55172 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df3baa9a6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1648 identity=55172 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df3baa9a6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1648 identity=55172 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=df3baa9a6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1648 identity=55172 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df3baa9a6c endpointID=1648 k8sNamespace=openstack k8sPodName=barbican-ks-service-ccxhl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e8d9469c-b0f5-44cb-90b6-c2d4cd68de4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=df3baa9a6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1648 identity=55172 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/barbican-ks-service-ccxhl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 2c16bf3b-21a4-416e-aae7-26ab9012e567 default }" containerID=77e793f2cd2cf21ab082247d70391d0d434fadb0a929a452b9db9676ac8859c3 datapathConfiguration="&{false false false false false }" interface=lxccb240af1c6af k8sPodName=openstack/barbican-ks-endpoints-hdk7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=18784 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=18784 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77e793f2cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=18784 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=77e793f2cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=18784 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77e793f2cd endpointID=170 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-hdk7f subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7d806cb1-ef29-4c0c-aeed-fd6154b9b0ac k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=77e793f2cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=18784 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/barbican-ks-endpoints-hdk7f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 17d91702-6833-4772-9a8b-584c44427317 default }" containerID=ce71f6502b851937c7a4ebbac337c1a39acf8adcad7ebd93d68b041cd548420f datapathConfiguration="&{false false false false false }" interface=lxc6c34769adae8 k8sPodName=openstack/barbican-ks-user-r6qkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce71f6502b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce71f6502b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce71f6502b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=20220 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce71f6502b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=20220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ce71f6502b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1331 identity=20220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce71f6502b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=20220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=daemon level=info msg="Delete endpoint request" containerID=ce71f6502b endpointID=1331 k8sNamespace=openstack k8sPodName=barbican-ks-user-r6qkk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=ca7b74d0-d46c-4083-a25b-55724f08b2b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ce71f6502b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1331 identity=20220 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/barbican-ks-user-r6qkk subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.33 6fa568e1-8784-4211-8d3b-97154c1610e6 default }" containerID=90218ee5ce7b90de21c5c8f9ea8e05409f03e98e1ba45a2296643511f6f5ae20 datapathConfiguration="&{false false false false false }" interface=lxc257aae10c505 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90218ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90218ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90218ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=35872 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90218ee5ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3773 identity=35872 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=90218ee5ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3773 identity=35872 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90218ee5ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3773 identity=35872 ipv4=10.0.0.33 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-hx4p9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.95 f008daa7-20e5-45a9-8c73-b728d06121e2 default }" containerID=65caa0d96e77b3359ea2d19cc3b5641e216d739681d651db225b63e3db523e78 datapathConfiguration="&{false false false false false }" interface=lxc23f194676dc4 k8sPodName=openstack/rook-ceph-detect-version-7ptjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65caa0d96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65caa0d96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=65caa0d96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identity=41514 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65caa0d96e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1714 identity=41514 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65caa0d96e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1714 identity=41514 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=65caa0d96e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1714 identity=41514 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65caa0d96e endpointID=1714 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7ptjg subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=2fce5e5c-e16c-40b5-8b76-5c9ce567704f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=65caa0d96e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1714 identity=41514 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7ptjg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 2c9d0171-7ddd-4185-90b4-f1fb136fc301 default }" containerID=6c766feea966c8b9f3dcb314c5552f22ee0ae67245a77177dd311ae51d30738f datapathConfiguration="&{false false false false false }" interface=lxc043d6bfedb39 k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c766feea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c766feea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c766feea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=23017 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c766feea9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1722 identity=23017 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c766feea9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1722 identity=23017 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c766feea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=23017 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.11 4795e6d7-6bcf-43a0-8d6b-aece8b055b5e default }" containerID=15061325cc3195306a8947acbc94ebeb7ab2815c544f1a48d6e9ecdba93adcbe datapathConfiguration="&{false false false false false }" interface=lxc5ec4d02b0aca k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15061325cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15061325cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=da07aca5-9f12-452d-9cc7-047857552b85,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=da07aca5-9f12-452d-9cc7-047857552b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=da07aca5-9f12-452d-9cc7-047857552b85;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=da07aca5-9f12-452d-9cc7-047857552b85;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15061325cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=34936 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=da07aca5-9f12-452d-9cc7-047857552b85,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=da07aca5-9f12-452d-9cc7-047857552b85,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15061325cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1544 identity=34936 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15061325cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1544 identity=34936 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=endpoint level=info msg="Successful endpoint creation" containerID=15061325cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=34936 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c766feea9 endpointID=1722 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6c766feea9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1722 identity=23017 ipv4=10.0.0.2 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-78aa9a05-f809-440a-94e9-fa2405a02fbf subsys=endpoint level=info msg="Delete endpoint request" containerID=15061325cc endpointID=1544 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-f9z2n subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=da07aca5-9f12-452d-9cc7-047857552b85 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=da07aca5-9f12-452d-9cc7-047857552b85 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=15061325cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1544 identity=34936 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-f9z2n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 8d9a0d3f-53a4-4fea-b381-1c534611f05b default }" containerID=05d69c7ae86407a315bbf06586ab31570dbccd2617b05f69d65bb7b3c3855e3b datapathConfiguration="&{false false false false false }" interface=lxce7e74a537596 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05d69c7ae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05d69c7ae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05d69c7ae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=59696 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05d69c7ae8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3524 identity=59696 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=05d69c7ae8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3524 identity=59696 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05d69c7ae8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3524 identity=59696 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 73cfd48e-d6d8-4177-aca3-404d9faae3c0 default }" containerID=cbd6997c103610df4468df5014abc60c46be1faaa775c925db6a0d34c21d26ad datapathConfiguration="&{false false false false false }" interface=lxc14c951a8069e k8sPodName=openstack/glance-db-init-4lkgk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbd6997c10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbd6997c10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbd6997c10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=38494 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd6997c10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3 identity=38494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cbd6997c10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3 identity=38494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd6997c10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=38494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbd6997c10 endpointID=3 k8sNamespace=openstack k8sPodName=glance-db-init-4lkgk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=11cb6581-4f8e-4cde-839d-793f1b89697f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cbd6997c10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3 identity=38494 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-db-init-4lkgk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 0ef877e3-8106-481e-985b-7f1b822b6069 default }" containerID=0104760b8ba10f1e612210bf8deffc40b5e4f2e5159af0ca94dedbb79538a8b4 datapathConfiguration="&{false false false false false }" interface=lxcb728bd912ff3 k8sPodName=openstack/glance-db-sync-nkbgw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0104760b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0104760b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=654e7f77-f808-49aa-a871-55eec530ca96,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=654e7f77-f808-49aa-a871-55eec530ca96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=654e7f77-f808-49aa-a871-55eec530ca96;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=654e7f77-f808-49aa-a871-55eec530ca96;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0104760b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=17572 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=654e7f77-f808-49aa-a871-55eec530ca96,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=654e7f77-f808-49aa-a871-55eec530ca96,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0104760b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1316 identity=17572 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0104760b8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1316 identity=17572 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=endpoint level=info msg="Successful endpoint creation" containerID=0104760b8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=17572 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.2 fe0cc4b8-db10-42f5-837d-4e8d4a66ab68 default }" containerID=25b9eb895741f8541d890484fd6ec65424a7a61214b945694b01169c16159024 datapathConfiguration="&{false false false false false }" interface=lxc0879e1733d94 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25b9eb8957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25b9eb8957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=25b9eb8957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=41020 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25b9eb8957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1244 identity=41020 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 db3dd4e8-e086-4e58-9faa-5962a118f073 default }" containerID=2c5b885e7441ae05dfd6f3145ad896a09dac8f20176b03e6bb1c3bc20127b819 datapathConfiguration="&{false false false false false }" interface=lxc2f6d38d91aca k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c5b885e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c5b885e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c5b885e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=48966 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c5b885e74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=48966 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25b9eb8957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1244 identity=41020 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w subsys=endpoint level=info msg="Successful endpoint creation" containerID=25b9eb8957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1244 identity=41020 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d446w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2c5b885e74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2417 identity=48966 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c5b885e74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2417 identity=48966 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-6vldp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0104760b8b endpointID=1316 k8sNamespace=openstack k8sPodName=glance-db-sync-nkbgw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=654e7f77-f808-49aa-a871-55eec530ca96 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=654e7f77-f808-49aa-a871-55eec530ca96 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0104760b8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1316 identity=17572 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/glance-db-sync-nkbgw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 b39d5c23-ba95-4f92-8120-5827e03fc91d default }" containerID=2cd4f2f464fd44f23670be4c28afb34eec247d5cc4e49c847b86f135c243903a datapathConfiguration="&{false false false false false }" interface=lxcb8f47eac6bb6 k8sPodName=openstack/glance-rabbit-init-mwnmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cd4f2f464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cd4f2f464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f46be578-9bcc-4887-a686-9918b481c459,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f46be578-9bcc-4887-a686-9918b481c459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f46be578-9bcc-4887-a686-9918b481c459;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=f46be578-9bcc-4887-a686-9918b481c459;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cd4f2f464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=5063 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f46be578-9bcc-4887-a686-9918b481c459,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=f46be578-9bcc-4887-a686-9918b481c459,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cd4f2f464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=962 identity=5063 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2cd4f2f464 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=962 identity=5063 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cd4f2f464 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=962 identity=5063 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2cd4f2f464 endpointID=962 k8sNamespace=openstack k8sPodName=glance-rabbit-init-mwnmv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f46be578-9bcc-4887-a686-9918b481c459 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=f46be578-9bcc-4887-a686-9918b481c459 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2cd4f2f464 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=962 identity=5063 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-rabbit-init-mwnmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 e16e30a2-3eea-43b3-bac5-132304a48347 default }" containerID=8ef40c8d4f0e2b9cea238b923c917834b54fcccc9ec2c8ae734143f58527055f datapathConfiguration="&{false false false false false }" interface=lxc634b1a95ef20 k8sPodName=openstack/glance-ks-service-rmn5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ef40c8d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ef40c8d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83e39224-cd83-4293-af38-b543b88371a5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=83e39224-cd83-4293-af38-b543b88371a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=83e39224-cd83-4293-af38-b543b88371a5;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=83e39224-cd83-4293-af38-b543b88371a5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ef40c8d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=25682 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=83e39224-cd83-4293-af38-b543b88371a5,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=83e39224-cd83-4293-af38-b543b88371a5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ef40c8d4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3626 identity=25682 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8ef40c8d4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3626 identity=25682 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ef40c8d4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3626 identity=25682 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ef40c8d4f endpointID=3626 k8sNamespace=openstack k8sPodName=glance-ks-service-rmn5w subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=83e39224-cd83-4293-af38-b543b88371a5 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=83e39224-cd83-4293-af38-b543b88371a5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8ef40c8d4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3626 identity=25682 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/glance-ks-service-rmn5w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 fb7fdb6f-aa5b-4459-a503-06660447705a default }" containerID=2e1648d4d4b22f194c669d277e9f26274615163cb6329128780c68fae8c327f9 datapathConfiguration="&{false false false false false }" interface=lxc17aa82c5e3d1 k8sPodName=openstack/glance-ks-endpoints-7wk27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e1648d4d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e1648d4d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e1648d4d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=752 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e1648d4d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=752 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2e1648d4d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=752 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e1648d4d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=752 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=daemon level=info msg="Delete endpoint request" containerID=2e1648d4d4 endpointID=880 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-7wk27 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=69a928ef-57bb-42e7-8e01-8cbf6b4afd5e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2e1648d4d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=752 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/glance-ks-endpoints-7wk27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 0f07e4c9-42bc-4b75-9f98-e4ea3ee1ef59 default }" containerID=f4b8d8152cace00b3537ca9e2d914f610ebb0a42b40c36f4c97e2052b0dc4798 datapathConfiguration="&{false false false false false }" interface=lxcaff7ef883c6c k8sPodName=openstack/glance-ks-user-8pmpw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4b8d8152c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4b8d8152c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4b8d8152c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=36596 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4b8d8152c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=528 identity=36596 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f4b8d8152c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=528 identity=36596 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4b8d8152c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=528 identity=36596 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4b8d8152c endpointID=528 k8sNamespace=openstack k8sPodName=glance-ks-user-8pmpw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=8aaf2db9-2bd2-4094-a20e-f0f6a05e925a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f4b8d8152c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=528 identity=36596 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/glance-ks-user-8pmpw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 aee67824-42ec-4c91-8ec7-b453e6643c63 default }" containerID=a945d4589f955412d235ddbed793080e159f4d508cb356a3741480e2936f88c3 datapathConfiguration="&{false false false false false }" interface=lxca69b83222408 k8sPodName=openstack/glance-metadefs-load-swtkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a945d4589f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a945d4589f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a945d4589f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=35435 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a945d4589f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1110 identity=35435 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a945d4589f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1110 identity=35435 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=a945d4589f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1110 identity=35435 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a945d4589f endpointID=1110 k8sNamespace=openstack k8sPodName=glance-metadefs-load-swtkc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=3190b50b-a34d-40c9-b8d8-c351378763c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a945d4589f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1110 identity=35435 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-metadefs-load-swtkc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 8c2c705d-d311-44b1-a80f-d5f5ef2ffd31 default }" containerID=47b993f6aa2f1ea34b0742ac8b5c5e5ad933e14116725377c7ab24780d80611c datapathConfiguration="&{false false false false false }" interface=lxcab747ecd29d0 k8sPodName=openstack/glance-storage-init-cfzmx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47b993f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47b993f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47b993f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=3739 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=47b993f6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=899 identity=3739 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=47b993f6aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=899 identity=3739 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=endpoint level=info msg="Successful endpoint creation" containerID=47b993f6aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=899 identity=3739 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=47b993f6aa endpointID=899 k8sNamespace=openstack k8sPodName=glance-storage-init-cfzmx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e88e6426-058c-47de-97a9-34cc664b5f33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=47b993f6aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=899 identity=3739 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/glance-storage-init-cfzmx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 898c5304-3b8e-4195-8394-10f8d9a18479 default }" containerID=235a16f48577f5817cd2f4413fb833518af6d0b9151388205209f35ea773cdd7 datapathConfiguration="&{false false false false false }" interface=lxc4e9c2b3bfbb4 k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=235a16f485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=235a16f485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=235a16f485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=58348 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=235a16f485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=58348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=235a16f485 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1996 identity=58348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl subsys=endpoint level=info msg="Successful endpoint creation" containerID=235a16f485 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1996 identity=58348 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-api-65b7f9f6bc-vtzhl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.200 e6403ed9-e872-446c-bcbb-19ce68c2a4c6 default }" containerID=f292d571d53554357b236c60dd6eb5a3c5436189e264407cafecee205ea84043 datapathConfiguration="&{false false false false false }" interface=lxcb6e3cf37cd7a k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.190 f57acb9f-a21e-4e1d-9a68-f808f841b8a4 default }" containerID=95910069c6af07452921ed0ee2c3c38019e2086ca570ff042da44dc052ec4673 datapathConfiguration="&{false false false false false }" interface=lxc4f89729c2ff8 k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=52195 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3096 identity=52195 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=6076 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1455 identity=6076 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 11b0ccd2-4d73-4886-940f-01164c62d1f0 default }" containerID=c2c2fd001399c83b09666099886ff88cd98ff20cbc4813a14fbfe48ee2cfd891 datapathConfiguration="&{false false false false false }" interface=lxcf0ed87094f55 k8sPodName=openstack/staffeln-db-init-d44bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c2c2fd0013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c2c2fd0013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c2c2fd0013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=29841 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c2c2fd0013 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3915 identity=29841 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=95910069c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1455 identity=6076 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95910069c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1455 identity=6076 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-f7c548854-lmrb7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f292d571d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3096 identity=52195 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f292d571d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3096 identity=52195 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/staffeln-api-5f6c4479b9-stl6f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c2c2fd0013 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3915 identity=29841 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c2c2fd0013 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3915 identity=29841 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c2c2fd0013 endpointID=3915 k8sNamespace=openstack k8sPodName=staffeln-db-init-d44bv subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=1d662f36-9501-41bc-a6bb-f4dbe16be117 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c2c2fd0013 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3915 identity=29841 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/staffeln-db-init-d44bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 0efa9754-4030-476e-966d-783c59356bb6 default }" containerID=2a95bb981bd5d5fa7e2862ce85b6fd2381367aae3d4d0b8cf412049bb46f85af datapathConfiguration="&{false false false false false }" interface=lxc83420fa08cb2 k8sPodName=openstack/staffeln-db-sync-wnh5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=8081 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c4e9e95f-be27-4742-a210-dc6055164ca1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=8081 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a95bb981b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=867 identity=8081 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a95bb981b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=867 identity=8081 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/staffeln-db-sync-wnh5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager