level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.324707ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.272µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.273627ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.061µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.069925ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="16.641µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.01µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="58.421µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="79.902µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="69.531µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration=1.169883ms function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="9.4µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=9.143911ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.827683ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.771µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="39.291µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="233.626µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="108.843µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="64.102µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.360096ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="69.412µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="10.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.134.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.599072ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.81µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.602286ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="6.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.477452ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.371µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="35.421µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="57.661µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="65.842µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="284.908µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.12µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.781µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="230.457µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="686.369µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.250586ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.4µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.3µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.134 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.134 ipAddr.ipv6="" k8sNodeIP=199.19.213.134 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.134" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.133" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.134" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.134} {CiliumInternalIP 10.0.0.133}] 10.0.0.0/24 [] [] 10.0.0.241 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:43229" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.398618671s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.64µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="17.22µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="47.581µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="10.621µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=111 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.334678552s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=280.775229ms file-path=/var/run/cilium/state/templates/90659479d18f20655419f3cc1fec76e8ea3026bae920548110ad5b0d8cf390ea/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=111 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 d3d10333-8ec5-4d66-8419-97a4312ace62 default }" containerID=e75488367b764ed655c79e9c5c5b7636f5f44255dd163ee9d30456ed2a7ecd5b datapathConfiguration="&{false false false false false }" interface=lxc064b16f073c8 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e75488367b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e75488367b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.71 7481a629-e8e1-4799-943e-963bb33c3d30 default }" containerID=1cdde99104dae9bdb099eb4b775ffca183b5bafd972515d809a58dffb610a785 datapathConfiguration="&{false false false false false }" interface=lxc80b3a85c77f6 k8sPodName=kube-system/coredns-7c96b6546b-m2qnx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e75488367b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=8237 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e75488367b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2901 identity=8237 ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=8526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=389 identity=8526 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 ipv4=10.0.0.241 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identityLabels="reserved:health" ipv4=10.0.0.241 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=555 identity=4 identityLabels="reserved:health" ipv4=10.0.0.241 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.044116329s file-path=/var/run/cilium/state/templates/42bde983880905df1c93fd2937fae33177c8f05b32388b3ca7cbb32f98a080f2/bpf_lxc.o subsys=datapath-loader level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=555 identity=4 ipv4=10.0.0.241 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1cdde99104 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=389 identity=8526 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=endpoint level=info msg="Successful endpoint creation" containerID=1cdde99104 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=389 identity=8526 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e75488367b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2901 identity=8237 ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=endpoint level=info msg="Successful endpoint creation" containerID=e75488367b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2901 identity=8237 ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e75488367b endpointID=2901 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ztg7d subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=787494de-3230-49c9-aac1-9c63c83a61ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e75488367b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2901 identity=8237 ipv4=10.0.0.221 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ztg7d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 597a92ee-acba-4ffb-acf6-2a556d707918 default }" containerID=008f3d827e8a595e7a9976062308d5850994f67dda1b45cd4ad044f0c2d7bc95 datapathConfiguration="&{false false false false false }" interface=lxc567531ff99dc k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=54091 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=501 identity=54091 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=008f3d827e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=501 identity=54091 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=008f3d827e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=501 identity=54091 ipv4=10.0.0.188 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csmbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=111 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00111 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00111 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00111 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00111:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=111 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 b35a6a16-16bd-4d76-a678-e9647c7d6c9e default }" containerID=0553cf5b126753fe76c6bc60491904c72852d11e3af089c600bbfe80fc7e5436 datapathConfiguration="&{false false false false false }" interface=lxcef1301c3124e k8sPodName=kube-system/coredns-67659f764b-fmtcs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0553cf5b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0553cf5b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0553cf5b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=8526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0553cf5b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=8526 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0553cf5b12 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2809 identity=8526 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs subsys=endpoint level=info msg="Successful endpoint creation" containerID=0553cf5b12 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2809 identity=8526 ipv4=10.0.0.39 ipv6= k8sPodName=kube-system/coredns-67659f764b-fmtcs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.101 a2518904-f874-45f4-bba6-66b22cfd4cef default }" containerID=2b9f3de1fa861665d7fa34c5d0aeffd2e7bfffad5870775715245607118cb1e7 datapathConfiguration="&{false false false false false }" interface=lxc761158267cee k8sPodName=kube-system/coredns-67659f764b-s2bh6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b9f3de1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b9f3de1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2b9f3de1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identity=8526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b9f3de1fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identity=8526 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b9f3de1fa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2413 identity=8526 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b9f3de1fa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2413 identity=8526 ipv4=10.0.0.101 ipv6= k8sPodName=kube-system/coredns-67659f764b-s2bh6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 cb8c975d-c396-48f4-8821-410b204e08ab default }" containerID=e2d421acc85636ecca444b87350d97017ccfd7ba182401794aae196740f1fc97 datapathConfiguration="&{false false false false false }" interface=lxcdf8614893a34 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2d421acc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2d421acc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2d421acc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=22163 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2d421acc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=22163 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e2d421acc8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3275 identity=22163 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2d421acc8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3275 identity=22163 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-8zd4n subsys=daemon level=info msg="Delete endpoint request" containerID=1cdde99104 endpointID=389 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-m2qnx subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1cdde99104 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=389 identity=8526 ipv4=10.0.0.71 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-m2qnx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 60f38b33-1a52-4718-9030-41e80d5e0f26 default }" containerID=910c1e0ce43c2c3242aed1a9f49b24800a1551e23db36559375dcfeff03a9ea9 datapathConfiguration="&{false false false false false }" interface=lxc7a58923a2b4e k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=910c1e0ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=910c1e0ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=910c1e0ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=11321 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=910c1e0ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=107 identity=11321 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 64a85768-d511-43db-8514-2ffb15bf22d7 default }" containerID=19cd7ff50cbc2b7ecf1930ddb808f14094900c97a2a5e5314ac9cdfea2dc1c1c datapathConfiguration="&{false false false false false }" interface=lxc669d277a7e9e k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19cd7ff50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 920f6b4e-c3a2-4f3d-b7f1-51f0d6efb99f default }" containerID=2089c992aed30156b7842c0a5aedafdbe7f5bb2f0249304ce39113f3f000d2a6 datapathConfiguration="&{false false false false false }" interface=lxcab3de85191fd k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2089c992ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2089c992ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2089c992ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=20543 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2089c992ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1311 identity=20543 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19cd7ff50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19cd7ff50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=10323 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19cd7ff50c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3818 identity=10323 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=910c1e0ce4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=107 identity=11321 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=910c1e0ce4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=107 identity=11321 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-c8n6s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2089c992ae datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1311 identity=20543 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2089c992ae datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1311 identity=20543 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-mqffp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=19cd7ff50c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3818 identity=10323 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=19cd7ff50c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3818 identity=10323 ipv4=10.0.0.225 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-r6x27 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.1 c57583d3-a8c9-4a96-b8fb-bfead30564e0 default }" containerID=0722bfc95cfe069415fd6c3277fc34ead2916e73e200773ce16ce93214a21f31 datapathConfiguration="&{false false false false false }" interface=lxc94c70b354c42 k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0722bfc95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0722bfc95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0722bfc95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=42156 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0722bfc95c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1918 identity=42156 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0722bfc95c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1918 identity=42156 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0722bfc95c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=42156 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0722bfc95c endpointID=1918 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-59nk7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1f907c5d-154d-40ba-92f0-e39b4dae9621 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=0722bfc95c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1918 identity=42156 ipv4=10.0.0.1 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-59nk7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 13e344f4-879f-4ccd-97a4-66da724599d3 default }" containerID=a65c97fe60fe74df47a62a879b0fddd144787a033a0c978ffe637013bd550603 datapathConfiguration="&{false false false false false }" interface=lxc62aff3df43cf k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a65c97fe60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a65c97fe60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a65c97fe60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=1640 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a65c97fe60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=1640 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a65c97fe60 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=746 identity=1640 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=a65c97fe60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=1640 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a65c97fe60 endpointID=746 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-9dk4z subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c06ee121-0cb8-4e52-a2cb-8af293a9f6bc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=a65c97fe60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=1640 ipv4=10.0.0.154 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-9dk4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 8fd1343b-8319-4c49-a05c-8df5f442cee2 default }" containerID=c3d38c922ad5c38f73d9988f7a0a79f8585675923e88287c9ad90e65e1395783 datapathConfiguration="&{false false false false false }" interface=lxc95086eac0f22 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3d38c922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3d38c922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3d38c922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=53633 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3d38c922a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3705 identity=53633 ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c3d38c922a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3705 identity=53633 ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3d38c922a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3705 identity=53633 ipv4=10.0.0.32 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xg564 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 c59d6e21-d754-4658-be23-4a5dfedc03e9 default }" containerID=28983aabc0b6d2d66940d0d4a8ef39e7bb83eca52e2d0b83021e17bf48d9ae28 datapathConfiguration="&{false false false false false }" interface=lxcef181e357def k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28983aabc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28983aabc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28983aabc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=52845 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28983aabc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=434 identity=52845 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28983aabc0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=434 identity=52845 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=28983aabc0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=434 identity=52845 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=28983aabc0 endpointID=434 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-bqr9z subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e4f730a3-b2f8-4d28-9303-eb2d591cb854 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=28983aabc0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=434 identity=52845 ipv4=10.0.0.242 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-bqr9z subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9d3e9bb5-047e-4482-9b6a-16916ff01501] Description:}]" policyAddRequest=d1a312fa-b103-4c6d-9c26-678cb3efd331 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1a312fa-b103-4c6d-9c26-678cb3efd331 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9d45c815-895a-4002-98d0-8a688b3d0829] Description:}]" policyAddRequest=35c03ded-31c4-4a8e-99c4-ec72fe5856ce subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=35c03ded-31c4-4a8e-99c4-ec72fe5856ce policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.11 0e426dbd-5e04-4cfe-b09d-e95ff4a46117 default }" containerID=386a84e0ec075e8bb99d1a4113d6dcfb56d1a6232913ea6e76539aac5487b028 datapathConfiguration="&{false false false false false }" interface=lxccef6232043e2 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=386a84e0ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=386a84e0ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=386a84e0ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=8317 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=386a84e0ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=32 identity=8317 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=386a84e0ec datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=32 identity=8317 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr subsys=endpoint level=info msg="Successful endpoint creation" containerID=386a84e0ec datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=32 identity=8317 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-z8psr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 933ba836-26a6-470e-bdb3-3e6005f59a26 default }" containerID=f0b255507cc2adc586c39fb6d9c8eb64cf282f5cc467d1972a9b5a0441ae59c4 datapathConfiguration="&{false false false false false }" interface=lxca8065be75a23 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0b255507c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0b255507c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0b255507c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=27819 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0b255507c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2262 identity=27819 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f0b255507c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2262 identity=27819 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0b255507c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2262 identity=27819 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-jj99l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 778cd8ff-fcb0-499c-9bee-06e61df3ce92 default }" containerID=1d906133e1be03d7e57ad2182f1e20fc819fba7c1492d108402964cbc8f3d817 datapathConfiguration="&{false false false false false }" interface=lxc0bb95326e39d k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=3518 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=3518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d906133e1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2271 identity=3518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d906133e1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2271 identity=3518 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6hst7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 7f3df943-27b3-4c60-be97-e90d7b90f996 default }" containerID=eed9d503ca7e826945ae2741f88e0c2d550a0af61c8592566d2ef18fcd291c5d datapathConfiguration="&{false false false false false }" interface=lxcc9e76bc24eef k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=65298 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2162 identity=65298 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 8e8aaa2c-1abc-434c-972c-17f2d072722e default }" containerID=0a85a3f6abb3f7af69da7722b21d3ef672ffbf02574995f8952d5da204a3d097 datapathConfiguration="&{false false false false false }" interface=lxc96f9ce00d987 k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a85a3f6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a85a3f6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a85a3f6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a85a3f6ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=17144 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eed9d503ca datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2162 identity=65298 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eed9d503ca datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2162 identity=65298 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a85a3f6ab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=351 identity=17144 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a85a3f6ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=351 identity=17144 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a85a3f6ab endpointID=351 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0a85a3f6ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=351 identity=17144 ipv4=10.0.0.29 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-478c6f21-035f-4622-96ec-26516579f7ed subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 73fdd34f-a90b-4dd7-8f0f-7ebfaa9e4340 default }" containerID=94b3a2b62217cd246f7f45c5f76871b559bf264b2ac9378500e62bc6589b9aa6 datapathConfiguration="&{false false false false false }" interface=lxccd977deddb58 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=21809 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=21809 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94b3a2b622 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=242 identity=21809 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94b3a2b622 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=242 identity=21809 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8d26e804-d3c4-46df-9d35-0c190e14232f] Description:}]" policyAddRequest=915399ae-f2be-453b-a7f1-231128e1f980 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=915399ae-f2be-453b-a7f1-231128e1f980 policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.185 f009242d-11b1-46d8-827f-81232f7732d9 default }" containerID=cc8c6d606fbffb00493f04e984d13984946ff7f1a9c068563195143197381954 datapathConfiguration="&{false false false false false }" interface=lxc0ad00690d3cb k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc8c6d606f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc8c6d606f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc8c6d606f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc8c6d606f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=17144 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc8c6d606f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2403 identity=17144 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc8c6d606f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2403 identity=17144 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=daemon level=info msg="Delete endpoint request" containerID=cc8c6d606f endpointID=2403 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=cc8c6d606f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2403 identity=17144 ipv4=10.0.0.185 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4837b1f0-162a-4b9c-bf84-6d9c9e2dfd43 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 e7d1f87c-ef02-4407-ac9a-66a1bf49984e default }" containerID=0f542758e40c3c4cd42a6eac1416b3abbdc70066757a3bfb8af18069a8e4c374 datapathConfiguration="&{false false false false false }" interface=lxcf00c711bc286 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f542758e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3219 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f542758e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3219 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f542758e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3219 identity=45647 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0f542758e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3219 identity=45647 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f542758e4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3219 identity=45647 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f542758e4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3219 identity=45647 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=32a85663-3961-4bd1-bc84-c729f6abcc15] Description:}]" policyAddRequest=52ef3740-9a2a-4bfb-aedb-1b1cf416154e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=52ef3740-9a2a-4bfb-aedb-1b1cf416154e policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.122 2f362de0-7286-4a80-b887-5fb7d0c33afc default }" containerID=d24d793302a072594a690005b8963ea46d308c4e20e15bb69b0d63b8eb28d50c datapathConfiguration="&{false false false false false }" interface=lxcc081605f15f9 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d24d793302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d24d793302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d24d793302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=37617 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d24d793302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3057 identity=37617 ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d24d793302 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3057 identity=37617 ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d24d793302 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3057 identity=37617 ipv4=10.0.0.122 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010111326037848147 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.82 bbcb6639-2956-41d7-a444-14499624cdef default }" containerID=ae059d5e257925dcda97956d305b29f9cafbd5e6b3802159994c197d15cb639f datapathConfiguration="&{false false false false false }" interface=lxca680fa7f7e03 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=59006 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=785 identity=59006 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae059d5e25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=785 identity=59006 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae059d5e25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=785 identity=59006 ipv4=10.0.0.82 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4g9r9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 40c7deed-3dfe-4164-b3a8-560914502a39 default }" containerID=55889d33a12c19ddfb24205e8f9686ba0133e2e49bd4f1c57725ed45fe19ff51 datapathConfiguration="&{false false false false false }" interface=lxc8a2de15aafee k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.190 cf10e26a-f953-46b7-bb5a-cd6059f3e887 default }" containerID=c6f20d1ebb914094927ccf7c1292f9fab986e9c7a90868a962d00ad3a5e247ef datapathConfiguration="&{false false false false false }" interface=lxc43704347e6ed k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=55889d33a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 subsys=endpoint level=info msg="New endpoint" containerID=c6f20d1ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6f20d1ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=55889d33a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6f20d1ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=14484 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=c6f20d1ebb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=11 identity=14484 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=55889d33a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=38483 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=55889d33a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=38483 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6f20d1ebb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=11 identity=14484 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6f20d1ebb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=11 identity=14484 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cl82q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=55889d33a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=38483 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=55889d33a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=38483 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-fbhg4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.102 48cd9a6a-ff44-4d5b-9d63-64c84aef5070 default }" containerID=62b770ad4eb34a8fa21f94c4927c8532f1d9bebfbb4af5e5f6ceea4fad72150f datapathConfiguration="&{false false false false false }" interface=lxc68661f0adab8 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62b770ad4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62b770ad4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62b770ad4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=58922 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62b770ad4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2769 identity=58922 ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62b770ad4e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2769 identity=58922 ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr subsys=endpoint level=info msg="Successful endpoint creation" containerID=62b770ad4e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2769 identity=58922 ipv4=10.0.0.102 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-bm2mr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00111 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00111 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00111 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00111:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=111 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 548283c0-0994-4573-8783-c98b7b2773bd default }" containerID=e8e775ec06041764a62ef71557b26bc336ef039a8ac16a4aea52e6bac1167148 datapathConfiguration="&{false false false false false }" interface=lxc5d37726cbe5f k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=491 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1235 identity=491 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8e775ec06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1235 identity=491 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8e775ec06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=491 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8e775ec06 endpointID=1235 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8jbs5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b6b6a187-8c86-4005-97c1-dd8fe82a79fa k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e8e775ec06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1235 identity=491 ipv4=10.0.0.160 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8jbs5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 0cdb9617-aeb0-4232-a672-e014ee0f8079 default }" containerID=39612afabb341ea4580a90ac55b1ea2645a8e3e4b213d8e080e58cc1bf87101a datapathConfiguration="&{false false false false false }" interface=lxc65952b7a9ccb k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39612afabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39612afabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.228 4e79b6b5-c8f5-47f5-8955-77a367dd7c73 default }" containerID=e060ddfa80b12a0b9eab884c349cf52e096a94385afdd213ef9ccf783e7cb9f8 datapathConfiguration="&{false false false false false }" interface=lxc95182d246685 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=39612afabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=51812 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39612afabb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=821 identity=51812 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identity=27644 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1032 identity=27644 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 e28befb5-6d57-42e6-8c2c-1c98a6586bab default }" containerID=ce498883daf823f5b4811817a2ccbb62cc9696a078576688b0391fdc59a02278 datapathConfiguration="&{false false false false false }" interface=lxc86813d3cca65 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce498883da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce498883da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce498883da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=2890 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce498883da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2202 identity=2890 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39612afabb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=821 identity=51812 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=39612afabb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=821 identity=51812 ipv4=10.0.0.77 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c749b8b79-srcnd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e060ddfa80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1032 identity=27644 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e060ddfa80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1032 identity=27644 ipv4=10.0.0.228 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-zndxq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ce498883da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2202 identity=2890 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce498883da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2202 identity=2890 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7xbxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 0fa4eb4c-d0eb-40e0-a643-6e91b36384a8 default }" containerID=22f856b1f66de157ea346e97ae5bd19b6bc5dbc3cf24bda670e5497814401026 datapathConfiguration="&{false false false false false }" interface=lxc0a908b51206e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22f856b1f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22f856b1f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22f856b1f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=20351 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22f856b1f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2495 identity=20351 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=22f856b1f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2495 identity=20351 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22f856b1f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=20351 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22f856b1f6 endpointID=2495 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-fnhl9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dcd55fcf-e397-4305-82d6-97ee852b1070 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=22f856b1f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2495 identity=20351 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-fnhl9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 f550f671-925d-48ae-859a-90b7ebd72ce2 default }" containerID=8fa30fb7992bd212f0010a5f1fed13a9d3e18105c1372929d8a9ba9403ff985c datapathConfiguration="&{false false false false false }" interface=lxcbb10e4fb19e8 k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fa30fb799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fa30fb799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fa30fb799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fa30fb799 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3564 identity=17144 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fa30fb799 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3564 identity=17144 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fa30fb799 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3564 identity=17144 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.71 ad790dd2-fa81-492a-b6cf-b7d17698f795 default }" containerID=aff8bbf8e9545061903f6a05be15f2567ed60421535476fa0e94aa555eef2f0f datapathConfiguration="&{false false false false false }" interface=lxc3ee833686d9a k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aff8bbf8e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aff8bbf8e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aff8bbf8e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aff8bbf8e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=17144 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aff8bbf8e9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=776 identity=17144 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=aff8bbf8e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=17144 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=daemon level=info msg="Delete endpoint request" containerID=8fa30fb799 endpointID=3564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8fa30fb799 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3564 identity=17144 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33938ccc-4239-4ab8-a99e-c6fe653d6d6a subsys=endpoint level=info msg="Delete endpoint request" containerID=aff8bbf8e9 endpointID=776 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=aff8bbf8e9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=776 identity=17144 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a79cee3e-1601-4c52-9793-ed1fae6e4bbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 93c82b2d-4fef-4714-95df-3909c45806ec default }" containerID=2bed6de9f66e226589d45188234ef63b6791b188a15b96cbd661264a52236c91 datapathConfiguration="&{false false false false false }" interface=lxc456dac15a06b k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bed6de9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bed6de9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2bed6de9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=21465 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2bed6de9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=21465 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bed6de9f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=21465 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bed6de9f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=21465 ipv4=10.0.0.161 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 975157fa-2ecb-4bba-a932-c7e413a6ce30 default }" containerID=05a9965857ec7cad0617ae3a4eaf5b91103fbcafcf02d1584aa4237e33c3d828 datapathConfiguration="&{false false false false false }" interface=lxcf3c201fd218d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05a9965857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05a9965857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05a9965857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=8120 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05a9965857 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2564 identity=8120 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05a9965857 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2564 identity=8120 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=05a9965857 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2564 identity=8120 ipv4=10.0.0.78 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 457e5b6d-2893-4f67-8b93-550814f4cece default }" containerID=8523a4729a355b734f7071280e70e94df3018fffaadbb87004c5afa12a10ecff datapathConfiguration="&{false false false false false }" interface=lxc7ef560532da9 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8523a4729a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8523a4729a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8523a4729a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=5537 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8523a4729a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=5537 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 68a1b30f-103c-4a4c-99b9-61899830a198 default }" containerID=e49e4d405665d65f61e848d0525b75e237749d4be8e0e134ba9a0a09b5edfd70 datapathConfiguration="&{false false false false false }" interface=lxc637c3cdea70d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e49e4d4056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e49e4d4056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e49e4d4056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=8699 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e49e4d4056 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=5 identity=8699 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8523a4729a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=5537 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8523a4729a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=5537 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e49e4d4056 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=5 identity=8699 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e49e4d4056 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=5 identity=8699 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.5 8b7c3596-ea9e-4e91-8ee5-ac0448c8cd13 default }" containerID=4a3376343d990b3f4deb8cf422be12d5e2157f6cfc973807418d4caa56b85dbe datapathConfiguration="&{false false false false false }" interface=lxc61d10e6ec506 k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a3376343d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a3376343d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a3376343d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=9615 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a3376343d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=826 identity=9615 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a3376343d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=826 identity=9615 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a3376343d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=826 identity=9615 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vcx6p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.211 9afd8f66-0704-43c8-804e-d270e3472964 default }" containerID=2d268e7c863d8688a3ec55686e019626f1d21346d84ea060d511b8ea458c5caf datapathConfiguration="&{false false false false false }" interface=lxc561786b1ecd8 k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d268e7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d268e7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d268e7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d268e7c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=17144 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d268e7c86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=55 identity=17144 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d268e7c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=17144 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.226 0fb3a781-2df1-41e2-82cd-329faa6591f2 default }" containerID=45de36db202a166b1a95d9f297d96aabb143054ea54a0f12c50aa81efc3b5a6d datapathConfiguration="&{false false false false false }" interface=lxce87e998cabd8 k8sPodName=monitoring/vector-g8nk7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45de36db20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45de36db20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45de36db20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=2903 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45de36db20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=2903 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=45de36db20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=159 identity=2903 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45de36db20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=2903 ipv4=10.0.0.226 ipv6= k8sPodName=monitoring/vector-g8nk7 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d268e7c86 endpointID=55 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2d268e7c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=17144 ipv4=10.0.0.211 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-95b965f7-1d2d-43aa-9c7a-ccc0939f078e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 4ad3cf47-299d-4a97-b029-765b8127560d default }" containerID=aacb2e0b9df08bb0a2ff1a23fa578ed864b1b42596f7bdeccbd293e10245ceff datapathConfiguration="&{false false false false false }" interface=lxce3866c38b62d k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aacb2e0b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aacb2e0b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aacb2e0b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=41488 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aacb2e0b9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=41488 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=aacb2e0b9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1207 identity=41488 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aacb2e0b9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=41488 ipv4=10.0.0.64 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 f1caec8a-7ab3-4690-a013-ad71cabdfe18 default }" containerID=3517ab07093dbe192baf3fd068144439a9728030ba71bd02034c5a8ee5f2308b datapathConfiguration="&{false false false false false }" interface=lxc9a7ed075691f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3517ab0709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3517ab0709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3517ab0709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=17408 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3517ab0709 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=779 identity=17408 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3517ab0709 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=779 identity=17408 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3517ab0709 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=779 identity=17408 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-qxhpf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 ab9b85e1-a644-480f-961c-ef8fca6f7ca7 default }" containerID=dd62fdab73bba187b23150ee470b7f137eccfb1b1abba98ee8cd08927b522d71 datapathConfiguration="&{false false false false false }" interface=lxc373677e07515 k8sPodName=openstack/memcached-memcached-6479589586-c8mld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=44945 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3686 identity=44945 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd62fdab73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3686 identity=44945 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd62fdab73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3686 identity=44945 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-c8mld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 1071d680-d10a-4da8-bb6e-42d27215a3fc default }" containerID=6dab8d3b86f2f827aeeae30746a07b405f173a541f6551b005dcdb37dfb68cff datapathConfiguration="&{false false false false false }" interface=lxc196be095e222 k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6dab8d3b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6dab8d3b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6dab8d3b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6dab8d3b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=17144 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6dab8d3b86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=902 identity=17144 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6dab8d3b86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=17144 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=daemon level=info msg="Delete endpoint request" containerID=6dab8d3b86 endpointID=902 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6dab8d3b86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=17144 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b734b62b-e545-4fb1-8dfe-44e01cf0a019 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 0d8d1aef-469a-44f0-a373-f57268c4df2d default }" containerID=e47b920b978571b6cc6e5a39380a8eff9bb7b944aec74da08709b7fa3a140941 datapathConfiguration="&{false false false false false }" interface=lxca8b2f1037e7d k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e47b920b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e47b920b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e47b920b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=6126 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e47b920b97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=537 identity=6126 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e47b920b97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=537 identity=6126 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e47b920b97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=537 identity=6126 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 d8a5f185-8410-4a1b-aab4-b0c99acdf59f default }" containerID=b7f5e04309dd6eeee82336038b21320ddea76d4d9dfec6cb53fcbb6b414d6f3e datapathConfiguration="&{false false false false false }" interface=lxce3e7ecaca5a7 k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7f5e04309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7f5e04309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7f5e04309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=14143 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7f5e04309 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3152 identity=14143 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 1704fbe7-35f7-47c5-9a72-42250c130d13 default }" containerID=c617efacf2a5505acc0725f79085f30f93ca0b2e5f218e9bf6b1b0a8435ddaf6 datapathConfiguration="&{false false false false false }" interface=lxc9bc567a18b30 k8sPodName=openstack/keystone-credential-setup-4stml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c617efacf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c617efacf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c617efacf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=20956 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c617efacf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1152 identity=20956 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7f5e04309 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3152 identity=14143 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7f5e04309 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3152 identity=14143 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/keystone-api-57d9f69b6b-knnrj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c617efacf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1152 identity=20956 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=endpoint level=info msg="Successful endpoint creation" containerID=c617efacf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=20956 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c617efacf2 endpointID=1152 k8sNamespace=openstack k8sPodName=keystone-credential-setup-4stml subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=852e2aa4-1e33-4f49-83f4-8873daaf2408 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c617efacf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1152 identity=20956 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/keystone-credential-setup-4stml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 7a9a3855-5881-47dc-98dd-84eb2370f865 default }" containerID=780a7edf216758c3679f27333bfa36823090e13cbdc6eb17df3cf859a15b9b2c datapathConfiguration="&{false false false false false }" interface=lxcb8f32356d84d k8sPodName=openstack/keystone-db-init-tl4qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=780a7edf21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=780a7edf21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=906aea3c-d7db-43af-b355-178603809740,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=906aea3c-d7db-43af-b355-178603809740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=906aea3c-d7db-43af-b355-178603809740;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=906aea3c-d7db-43af-b355-178603809740;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=780a7edf21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identity=11020 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=906aea3c-d7db-43af-b355-178603809740,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=906aea3c-d7db-43af-b355-178603809740,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=780a7edf21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2624 identity=11020 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=780a7edf21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2624 identity=11020 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=780a7edf21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2624 identity=11020 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=780a7edf21 endpointID=2624 k8sNamespace=openstack k8sPodName=keystone-db-init-tl4qc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=906aea3c-d7db-43af-b355-178603809740 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=906aea3c-d7db-43af-b355-178603809740 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=780a7edf21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2624 identity=11020 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-db-init-tl4qc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 17bbf9e8-fa8e-4585-b50b-f7a63718dff5 default }" containerID=0faadcc8c66154e10a25c759c8e08405bd40a5eea0f675bd7c7cd007397ae1c1 datapathConfiguration="&{false false false false false }" interface=lxc9e34555cd0c6 k8sPodName=openstack/keystone-fernet-setup-7f9tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=40021 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=40021 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0faadcc8c6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=728 identity=40021 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=0faadcc8c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=40021 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0faadcc8c6 endpointID=728 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-7f9tm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=b15295f5-874d-423a-b3b3-5f5ee825bfb3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0faadcc8c6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=728 identity=40021 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/keystone-fernet-setup-7f9tm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 0cfac2bf-27ed-40c8-9744-f15d41dc4f13 default }" containerID=b22bfdb40e600888dc9142d5ae1d6c11d271cbde37bc1c3b66628fcbca0f538d datapathConfiguration="&{false false false false false }" interface=lxc0a032af96062 k8sPodName=openstack/keystone-db-sync-k8lj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b22bfdb40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b22bfdb40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b22bfdb40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=20983 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b22bfdb40e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1156 identity=20983 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b22bfdb40e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1156 identity=20983 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b22bfdb40e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1156 identity=20983 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b22bfdb40e endpointID=1156 k8sNamespace=openstack k8sPodName=keystone-db-sync-k8lj4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=848baf6b-2fc5-426a-9c75-c8e5023dc529 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b22bfdb40e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1156 identity=20983 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-k8lj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 1b3429ed-ad57-4690-b0fd-d3ea4e9d3f11 default }" containerID=76613e70feee48dcb82c4c54e9a18d80acf3eb1c08a5e25a2393bb6183225172 datapathConfiguration="&{false false false false false }" interface=lxc9d3c49ee29c5 k8sPodName=openstack/keystone-rabbit-init-hfxqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76613e70fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76613e70fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76613e70fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=12149 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76613e70fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=12149 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76613e70fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=720 identity=12149 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=76613e70fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=12149 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76613e70fe endpointID=720 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-hfxqf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bd7854ee-4234-4c73-a4b4-a9f7b2f63aba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=76613e70fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=12149 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/keystone-rabbit-init-hfxqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 aaebbe68-51b0-40d7-99c0-eaf8cdeac51f default }" containerID=91ca0f0c86771f55b3843eb372ff759d91f9973dfebaf7f13fabee3299a0e589 datapathConfiguration="&{false false false false false }" interface=lxcca8822d906ba k8sPodName=openstack/keystone-domain-manage-vcnkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91ca0f0c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91ca0f0c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=91ca0f0c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=1903 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=91ca0f0c86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=697 identity=1903 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91ca0f0c86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=697 identity=1903 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=91ca0f0c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=1903 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=daemon level=info msg="Delete endpoint request" containerID=91ca0f0c86 endpointID=697 k8sNamespace=openstack k8sPodName=keystone-domain-manage-vcnkr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=3f2b180c-ccd6-471e-ad60-f5ac25fba2cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91ca0f0c86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=697 identity=1903 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/keystone-domain-manage-vcnkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 d13bb025-b848-486a-b06d-ae25f68a8425 default }" containerID=824d9a37cc390315060e887fc3f9c323728c8342b5441e31987faac23394a111 datapathConfiguration="&{false false false false false }" interface=lxc845ae24f27fc k8sPodName=openstack/keystone-bootstrap-q7z2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=824d9a37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=824d9a37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf918282-8d18-46f9-9a57-755197d7c307,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bf918282-8d18-46f9-9a57-755197d7c307,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bf918282-8d18-46f9-9a57-755197d7c307;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=bf918282-8d18-46f9-9a57-755197d7c307;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=824d9a37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=24606 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bf918282-8d18-46f9-9a57-755197d7c307,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=bf918282-8d18-46f9-9a57-755197d7c307,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=824d9a37cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=24606 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=824d9a37cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1017 identity=24606 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=824d9a37cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1017 identity=24606 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=824d9a37cc endpointID=1017 k8sNamespace=openstack k8sPodName=keystone-bootstrap-q7z2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bf918282-8d18-46f9-9a57-755197d7c307 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=bf918282-8d18-46f9-9a57-755197d7c307 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=824d9a37cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1017 identity=24606 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/keystone-bootstrap-q7z2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 33ae2411-596a-401c-a730-535d58244f5c default }" containerID=b17ed82d3832925fa1814c196c7dec901b6e2d8ced8d9d44fe7ca95e3497b9ac datapathConfiguration="&{false false false false false }" interface=lxc478a7bb8d761 k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b17ed82d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b17ed82d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b17ed82d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b17ed82d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=907 identity=17144 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b17ed82d38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=907 identity=17144 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=endpoint level=info msg="Successful endpoint creation" containerID=b17ed82d38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=17144 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=daemon level=info msg="Delete endpoint request" containerID=b17ed82d38 endpointID=907 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b17ed82d38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=907 identity=17144 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-56242e29-facd-41fe-96c5-8a21f8922fce subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 e64d96d8-7a4a-4e2f-b396-6ea06045b6c2 default }" containerID=250d63e9c5640f0597935f03e0ed13804b7e1310050424aa79f91eb1252c5e53 datapathConfiguration="&{false false false false false }" interface=lxc65e421a650b4 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=250d63e9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=250d63e9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=250d63e9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=56794 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=250d63e9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=56794 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=250d63e9c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2985 identity=56794 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=250d63e9c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2985 identity=56794 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 c32cadd3-180b-4f65-ab92-e77c9f76e4b0 default }" containerID=075ef7671d1b7687b44cd1bc27dd867eefba2328d3023aa7747802761705b5d4 datapathConfiguration="&{false false false false false }" interface=lxcc42d59a6a701 k8sPodName=openstack/barbican-api-5d767b6cff-blj5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=075ef7671d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=075ef7671d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=075ef7671d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=54515 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=075ef7671d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=60 identity=54515 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.26 73b9dd0e-7290-4d09-a906-66804723615e default }" containerID=dee34fd636210882c3a1a5c9a594338b15ebd10b5eddedb187bbffe73509259e datapathConfiguration="&{false false false false false }" interface=lxca68a2edb33ee k8sPodName=openstack/barbican-db-init-mwm2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dee34fd636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dee34fd636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dee34fd636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=30951 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dee34fd636 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1625 identity=30951 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=075ef7671d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=60 identity=54515 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=075ef7671d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=60 identity=54515 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/barbican-api-5d767b6cff-blj5r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dee34fd636 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1625 identity=30951 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=dee34fd636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=30951 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dee34fd636 endpointID=1625 k8sNamespace=openstack k8sPodName=barbican-db-init-mwm2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=dfe6439e-ac35-4e5a-b72e-330153f178fd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dee34fd636 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1625 identity=30951 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-db-init-mwm2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 103bfb1c-3855-42a9-b7d9-960ff6b5ab36 default }" containerID=232461d623852e861ad57cacaedd9ad84e08755d0a52b9950d304115f9c3e1c0 datapathConfiguration="&{false false false false false }" interface=lxc6e37775b6cab k8sPodName=openstack/barbican-db-sync-8tr62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=232461d623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=232461d623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=232461d623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=20012 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=232461d623 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=319 identity=20012 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=232461d623 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=319 identity=20012 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=232461d623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=319 identity=20012 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03595776915064861 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=232461d623 endpointID=319 k8sNamespace=openstack k8sPodName=barbican-db-sync-8tr62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a07f7f63-f0c7-4abd-9081-3a393d731cbf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=232461d623 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=319 identity=20012 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-8tr62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 8a1bf8e9-5ce8-4d9e-8b1e-ca84f7cc7847 default }" containerID=b114e5c5cbb3cf2361c6214d8064ce789c7731c8d5fc68ffa196f7329c27e62d datapathConfiguration="&{false false false false false }" interface=lxccf27766eb22c k8sPodName=openstack/barbican-rabbit-init-kl2hw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=4561 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2655 identity=4561 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b114e5c5cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2655 identity=4561 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b114e5c5cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2655 identity=4561 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b114e5c5cb endpointID=2655 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-kl2hw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=0c416c1a-7c79-4f00-b645-d514ab1e27e6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b114e5c5cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2655 identity=4561 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/barbican-rabbit-init-kl2hw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 c581dba3-35e4-443e-9bc6-fac4d453407e default }" containerID=fd5ebb7049a7cf98aad9d293063261d269d7b91a0f9df46e6ec30181751b1ff4 datapathConfiguration="&{false false false false false }" interface=lxc6b7ef2c2e532 k8sPodName=openstack/barbican-ks-service-7hlht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd5ebb7049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd5ebb7049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd5ebb7049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=9050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd5ebb7049 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=9050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd5ebb7049 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2411 identity=9050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd5ebb7049 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2411 identity=9050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd5ebb7049 endpointID=2411 k8sNamespace=openstack k8sPodName=barbican-ks-service-7hlht subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=13cd2d13-1b56-4886-b031-4ee54c445a75 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fd5ebb7049 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2411 identity=9050 ipv4=10.0.0.113 ipv6= k8sPodName=openstack/barbican-ks-service-7hlht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 18c5624e-75ba-4ef1-8812-97069b3a624d default }" containerID=152686d5bd361ee3b79fc603fd56c24549df0c01c65a77ab03d1b03233502475 datapathConfiguration="&{false false false false false }" interface=lxcd9f577a71fde k8sPodName=openstack/barbican-ks-endpoints-k56kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=068c6333-2571-4b06-9985-6536a0c28e82,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=068c6333-2571-4b06-9985-6536a0c28e82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=068c6333-2571-4b06-9985-6536a0c28e82;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=068c6333-2571-4b06-9985-6536a0c28e82;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=13059 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=068c6333-2571-4b06-9985-6536a0c28e82,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=068c6333-2571-4b06-9985-6536a0c28e82,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=13059 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=152686d5bd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3268 identity=13059 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=152686d5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=13059 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=152686d5bd endpointID=3268 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-k56kt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=068c6333-2571-4b06-9985-6536a0c28e82 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=068c6333-2571-4b06-9985-6536a0c28e82 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=152686d5bd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3268 identity=13059 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k56kt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 6de112e8-71e3-4554-88c0-eaf2f7ab8ad7 default }" containerID=2c237c3d4834dcb99d32f1ee4d6f36b148cc8840d16208041db67b4889e9fab4 datapathConfiguration="&{false false false false false }" interface=lxc78c2d81738dc k8sPodName=openstack/barbican-ks-user-t6zml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c237c3d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c237c3d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=2c237c3d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=2965 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c237c3d48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=622 identity=2965 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c237c3d48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=622 identity=2965 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c237c3d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=622 identity=2965 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=daemon level=info msg="Delete endpoint request" containerID=2c237c3d48 endpointID=622 k8sNamespace=openstack k8sPodName=barbican-ks-user-t6zml subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=11a78a97-ba5c-42ca-ba77-1fe086ddae47 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2c237c3d48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=622 identity=2965 ipv4=10.0.0.76 ipv6= k8sPodName=openstack/barbican-ks-user-t6zml subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.135 29882040-2a96-48b0-875e-3b7fa3c707e6 default }" containerID=92894f5ce219d3bf9731cb48d3a9b11266bacfcfdb543799baf2070f255bcbbd datapathConfiguration="&{false false false false false }" interface=lxc09306964d84c k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92894f5ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92894f5ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92894f5ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=1568 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92894f5ce2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=1568 ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=92894f5ce2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=947 identity=1568 ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=92894f5ce2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=1568 ipv4=10.0.0.135 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-lzw6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 d0e0d233-545b-456e-b0cb-48ddfaa4c0b9 default }" containerID=8d0c17409a9571a81734779d81e2b601931ec09870bdd174a5864bf6ccc1ce82 datapathConfiguration="&{false false false false false }" interface=lxc8dfc690490d1 k8sPodName=openstack/rook-ceph-detect-version-tttj6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d0c17409a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d0c17409a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8d0c17409a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identity=44312 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d0c17409a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3566 identity=44312 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d0c17409a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3566 identity=44312 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d0c17409a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3566 identity=44312 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8d0c17409a endpointID=3566 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-tttj6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=486f83bc-7aed-4004-98a8-1a89b61a9824 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=8d0c17409a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3566 identity=44312 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/rook-ceph-detect-version-tttj6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 2da7a5ac-3127-4b0b-af5b-a825495b8d86 default }" containerID=76f1b6dc540e33cc6665a4353f3f8f9d4d4f3a9575349a3053a3211948a155c6 datapathConfiguration="&{false false false false false }" interface=lxcd2bd2675e5a5 k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identity=51439 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2981 identity=51439 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76f1b6dc54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2981 identity=51439 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=endpoint level=info msg="Successful endpoint creation" containerID=76f1b6dc54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2981 identity=51439 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76f1b6dc54 endpointID=2981 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-qq4nh subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=84808c1b-6544-4c9a-bace-fadb2eb9eb5c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=76f1b6dc54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2981 identity=51439 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-qq4nh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 d04190cd-f8dc-4849-a963-acdbb9b7ab66 default }" containerID=b07eabb55df667c49691fc0bccccf7b8e66ce6b0779be9f04bb3ae49592f3168 datapathConfiguration="&{false false false false false }" interface=lxc66e66a637dc2 k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b07eabb55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b07eabb55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b07eabb55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=17144 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b07eabb55d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=17144 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b07eabb55d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=17144 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b07eabb55d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=17144 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=daemon level=info msg="Delete endpoint request" containerID=b07eabb55d endpointID=169 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b07eabb55d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=17144 ipv4=10.0.0.170 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-527c359e-8507-4fc6-94e2-da6b41091fa8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 62b7c419-e3a0-45cf-90c4-7d449bb5616c default }" containerID=75446318283a339415e33650f64be14b859d227b9f8216057a768e3c84daabff datapathConfiguration="&{false false false false false }" interface=lxc8e148492df54 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7544631828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7544631828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7544631828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=33660 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7544631828 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2961 identity=33660 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7544631828 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2961 identity=33660 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7544631828 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2961 identity=33660 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.156 19b9793c-cc5d-4979-85ba-d7ac3932aaed default }" containerID=ee47da7eed1f9000bde540962c83e77b786e30c2ee534cd622ac1d8c91555c94 datapathConfiguration="&{false false false false false }" interface=lxc308341cc5dd9 k8sPodName=openstack/glance-db-init-jwdbq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee47da7eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee47da7eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee47da7eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 identity=2073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee47da7eed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3588 identity=2073 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ee47da7eed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3588 identity=2073 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee47da7eed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3588 identity=2073 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 4cc168a5-7bdc-4da3-bcc9-27156d01f3e1 default }" containerID=7f6517e0b03af1805fe86b7464322a7a0bea39a5c99b3bd4993694c0644def11 datapathConfiguration="&{false false false false false }" interface=lxcc1d47ddd9c37 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=26036 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=119 identity=26036 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 c398b906-5b1f-47ff-869a-d8e49ab67e7d default }" containerID=b61de325a6c45d8e141e50e8f4012cf0629c1c161c0b216b51e1c1fdcbc0fd6d datapathConfiguration="&{false false false false false }" interface=lxc27efe5868274 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b61de325a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b61de325a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b61de325a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=5955 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b61de325a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3962 identity=5955 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f6517e0b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=119 identity=26036 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f6517e0b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=119 identity=26036 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-wh8df subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b61de325a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3962 identity=5955 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b61de325a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3962 identity=5955 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lclp4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee47da7eed endpointID=3588 k8sNamespace=openstack k8sPodName=glance-db-init-jwdbq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8b500afd-92dd-4f38-a76d-7b21012c2de6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ee47da7eed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3588 identity=2073 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-db-init-jwdbq subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.13 6f06aae8-b7d0-452c-9646-b4383df72a93 default }" containerID=bd4cb983e2395fe6b888845deb88261eafd5fde9343708886cf57b84b254e1e7 datapathConfiguration="&{false false false false false }" interface=lxc705f34d040d5 k8sPodName=openstack/glance-db-sync-rkkjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd4cb983e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd4cb983e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd4cb983e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=35341 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bd4cb983e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=35341 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd4cb983e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=105 identity=35341 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd4cb983e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=35341 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bd4cb983e2 endpointID=105 k8sNamespace=openstack k8sPodName=glance-db-sync-rkkjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=18ef5f93-4e27-4df4-9d7a-d47f01f79362 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bd4cb983e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=35341 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/glance-db-sync-rkkjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 4e9f7a90-dcc8-4d73-a79a-16d698715602 default }" containerID=3bcaba501dcedfd4f4630c3ffd04115387214ed2eb2160d6ba055283554be251 datapathConfiguration="&{false false false false false }" interface=lxcdc4d599948ce k8sPodName=openstack/glance-rabbit-init-cmkvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3bcaba501d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3bcaba501d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3bcaba501d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=45601 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3bcaba501d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=45601 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3bcaba501d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3122 identity=45601 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=3bcaba501d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3122 identity=45601 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3bcaba501d endpointID=3122 k8sNamespace=openstack k8sPodName=glance-rabbit-init-cmkvh subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=179f279b-13d4-4b20-905d-5cb47b53b380 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3bcaba501d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3122 identity=45601 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-rabbit-init-cmkvh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 c652528e-428e-4cff-b8f1-e708ddb00982 default }" containerID=79dc25c9c54ad92a4232db2f85fc1207fa16a1a44971f9ba60590526ae201f6e datapathConfiguration="&{false false false false false }" interface=lxc0ea506dd951b k8sPodName=openstack/glance-ks-service-mtb9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79dc25c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79dc25c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79dc25c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=8767 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=79dc25c9c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=8767 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79dc25c9c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2046 identity=8767 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=79dc25c9c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2046 identity=8767 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=79dc25c9c5 endpointID=2046 k8sNamespace=openstack k8sPodName=glance-ks-service-mtb9z subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=ee1a922d-0809-4711-bc31-fcc62fe7eb25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=79dc25c9c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2046 identity=8767 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/glance-ks-service-mtb9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 4004c19c-39c4-4306-8197-3cecc9f56c94 default }" containerID=72b365c06cfa17312a951a13513903320874dc4ef47e4bbea0002157f0d78345 datapathConfiguration="&{false false false false false }" interface=lxcc944e25aa62e k8sPodName=openstack/glance-ks-endpoints-m5gtw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72b365c06c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72b365c06c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72b365c06c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identity=4758 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=72b365c06c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3073 identity=4758 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72b365c06c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3073 identity=4758 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=endpoint level=info msg="Successful endpoint creation" containerID=72b365c06c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=4758 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=daemon level=info msg="Delete endpoint request" containerID=72b365c06c endpointID=3073 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-m5gtw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=a4e83c76-ebbf-45f7-b96c-33ab21365a20 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=72b365c06c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3073 identity=4758 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-ks-endpoints-m5gtw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 132ab9eb-d062-450f-8d21-be4a934c8fac default }" containerID=1dc10906d7259a191c89af2248327fc6c39c23a2de51b76c9916f600a7334cfa datapathConfiguration="&{false false false false false }" interface=lxc3a7393527507 k8sPodName=openstack/glance-ks-user-plsxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=17314 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3244 identity=17314 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dc10906d7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3244 identity=17314 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dc10906d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3244 identity=17314 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1dc10906d7 endpointID=3244 k8sNamespace=openstack k8sPodName=glance-ks-user-plsxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=b3627171-4923-478c-bd2a-1682992aa3b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1dc10906d7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3244 identity=17314 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/glance-ks-user-plsxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.85 41363b13-84cb-41dd-bfc7-150badb0cd0b default }" containerID=bf58d05a6fc43ea197e3d7628d303ed873432cffac395fe05b9c14a5b97f08cb datapathConfiguration="&{false false false false false }" interface=lxcb31066e4392b k8sPodName=openstack/glance-metadefs-load-vzr2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bf58d05a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bf58d05a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84f74e68-e61d-46b7-9071-082126468176,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=84f74e68-e61d-46b7-9071-082126468176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=84f74e68-e61d-46b7-9071-082126468176;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=84f74e68-e61d-46b7-9071-082126468176;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=bf58d05a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=33954 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84f74e68-e61d-46b7-9071-082126468176,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=84f74e68-e61d-46b7-9071-082126468176,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bf58d05a6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1479 identity=33954 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bf58d05a6f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1479 identity=33954 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=bf58d05a6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=33954 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bf58d05a6f endpointID=1479 k8sNamespace=openstack k8sPodName=glance-metadefs-load-vzr2d subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=84f74e68-e61d-46b7-9071-082126468176 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=84f74e68-e61d-46b7-9071-082126468176 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bf58d05a6f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1479 identity=33954 ipv4=10.0.0.85 ipv6= k8sPodName=openstack/glance-metadefs-load-vzr2d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 b1bcacdf-2c78-4544-904c-43d8bdf133f3 default }" containerID=ca28bc662d16aa1878a7335cdf906fe7caba2c5affe5cca4c651a12ccaaa2616 datapathConfiguration="&{false false false false false }" interface=lxc576831e89f24 k8sPodName=openstack/glance-storage-init-kt6z5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca28bc662d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca28bc662d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ca28bc662d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=51910 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca28bc662d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=79 identity=51910 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca28bc662d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=79 identity=51910 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca28bc662d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=79 identity=51910 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca28bc662d endpointID=79 k8sNamespace=openstack k8sPodName=glance-storage-init-kt6z5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=e9a5748f-8054-4d41-a869-f1e14c130f2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ca28bc662d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=79 identity=51910 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-storage-init-kt6z5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 8ad654a2-3f7c-4067-83e8-be86eb75b908 default }" containerID=9415d2221a6c7e0e2f9a00da3c8a7ccb973b51b153fb0c7cc20526fbfd8922b5 datapathConfiguration="&{false false false false false }" interface=lxcb41bc91152f4 k8sPodName=openstack/glance-api-7f6d87684f-w2tvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=6442 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2055 identity=6442 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9415d2221a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2055 identity=6442 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9415d2221a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2055 identity=6442 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-api-7f6d87684f-w2tvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.213 a5f6011d-c439-4b34-8f59-553ef3cb0d31 default }" containerID=4cd71b9179eb51ee38ee196478f54a6b1afbcab1e4eb65ecaefe83a7e9e8c9dc datapathConfiguration="&{false false false false false }" interface=lxc0bfe501d865e k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4cd71b9179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4cd71b9179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4cd71b9179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=6084 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4cd71b9179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1933 identity=6084 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 7d9c19ee-fd94-4ab2-8416-ae967ef5cdc9 default }" containerID=96f3c0c764b4b385c6fa764620c1f412b60d057ec910db3b97728b8d5c55c17f datapathConfiguration="&{false false false false false }" interface=lxcaaecd07ce1cd k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96f3c0c764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96f3c0c764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96f3c0c764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=20664 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96f3c0c764 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3668 identity=20664 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 0366bae7-68f2-49c6-a6f1-18a0b1e65e14 default }" containerID=de9147530b5378707e44abb158cd2a0dc78eba3d6c234ccfbc2e836284cb0dc2 datapathConfiguration="&{false false false false false }" interface=lxc7794f7b71126 k8sPodName=openstack/staffeln-db-init-5rr5g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de9147530b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de9147530b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de9147530b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=12186 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de9147530b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1700 identity=12186 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4cd71b9179 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1933 identity=6084 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4cd71b9179 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1933 identity=6084 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/staffeln-conductor-6c8794d549-ns47f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96f3c0c764 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3668 identity=20664 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b subsys=endpoint level=info msg="Successful endpoint creation" containerID=96f3c0c764 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3668 identity=20664 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-api-765c9447f8-ppv8b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=de9147530b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1700 identity=12186 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=endpoint level=info msg="Successful endpoint creation" containerID=de9147530b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1700 identity=12186 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=de9147530b endpointID=1700 k8sNamespace=openstack k8sPodName=staffeln-db-init-5rr5g subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=3477eb14-6f78-406e-b323-2c3ccefa9038 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=de9147530b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1700 identity=12186 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/staffeln-db-init-5rr5g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 f29d4007-e1df-4027-a1ec-39696f0b3736 default }" containerID=fa1a63ad47853a3eeb18aa9739d4bdce11d6bfa161a03a81a4e69aef835f4be7 datapathConfiguration="&{false false false false false }" interface=lxcbb5384d86435 k8sPodName=openstack/staffeln-db-sync-m9hns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa1a63ad47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa1a63ad47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa1a63ad47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=7040 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=682e2f2a-b9a9-44bd-b5dd-d5a5718aeeea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fa1a63ad47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2186 identity=7040 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa1a63ad47 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2186 identity=7040 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa1a63ad47 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2186 identity=7040 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/staffeln-db-sync-m9hns subsys=daemon