level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.035002ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.132µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.051483ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="11.41µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=92.863219ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.571µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.57µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="45.961µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="49.722µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="60.242µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="358.662µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.44µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.039806ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.066492ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.571µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="60.302µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="447.634µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="98.583µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="73.082µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.515696ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="78.642µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="4.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="7.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.38.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.528864ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.12623ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.804839ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="12.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="56.412µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.34µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="46.112µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="285.379µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.28µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="201.496µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="846.217µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.137356ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.01µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="39.721µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.38 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.38 ipAddr.ipv6="" k8sNodeIP=199.204.45.38 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.38" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.171" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.38" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.38} {CiliumInternalIP 10.0.0.171}] 10.0.0.0/24 [] [] 10.0.0.159 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:34083" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.60950341s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="14.281µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.48µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="173.236µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="78.673µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.61114081s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=321.621254ms file-path=/var/run/cilium/state/templates/39c0518c50dd3df20913e62a514ef4f95e9f1c8c1f2f86383c638e27f0abeb0b/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=26 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identityLabels="reserved:health" ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=216 identity=4 identityLabels="reserved:health" ipv4=10.0.0.159 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 ab212be4-0e8a-4a39-8c7f-dc7d1f1b3464 default }" containerID=d6aab930621b637b18fe3df8905ff776bfe97836c6b29e5d7d7337cb09a157a7 datapathConfiguration="&{false false false false false }" interface=lxc7b3025d86038 k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.78 eb7d9f65-b683-44d5-b6f7-113ac6615113 default }" containerID=04cd7a580b444838e7d6c66012fccf569654923a0f77de7b948621a1936f3487 datapathConfiguration="&{false false false false false }" interface=lxc3ad0eff34c77 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=7789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2515 identity=7789 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=28031 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2814 identity=28031 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.116032527s file-path=/var/run/cilium/state/templates/ec37e6ee4cc4b03920ccee6b6fa88b9933dfa6ed57027b746437c1e3ae6a028b/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=04cd7a580b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2814 identity=28031 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04cd7a580b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2814 identity=28031 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d6aab93062 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2515 identity=7789 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6aab93062 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2515 identity=7789 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=216 identity=4 ipv4=10.0.0.159 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=04cd7a580b endpointID=2814 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-fc9c6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=732ea6d3-1fd0-4955-b8aa-ad8c8698ad90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=04cd7a580b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2814 identity=28031 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-fc9c6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 6d8b966e-d6f1-4d82-a4fb-2a568a0ce007 default }" containerID=1a6c6cb02ff9f6be3df038949b3e7ab295cbf15efa9b4c727e5417bd8f24d72d datapathConfiguration="&{false false false false false }" interface=lxc8e4e63abb229 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a6c6cb02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a6c6cb02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a6c6cb02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identity=11073 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a6c6cb02f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1265 identity=11073 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1a6c6cb02f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1265 identity=11073 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a6c6cb02f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1265 identity=11073 ipv4=10.0.0.21 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-xmsvg subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00026 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00026 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00026 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00026:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 a96e0745-4c10-4612-ab85-ce63599b9efa default }" containerID=5c9fc9100ae55a10045c258e61ae6f413ee8d71edd20af9d17936c654beb5a36 datapathConfiguration="&{false false false false false }" interface=lxc9f0f0016210a k8sPodName=kube-system/coredns-67659f764b-f4xcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c9fc9100a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c9fc9100a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5c9fc9100a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=7789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c9fc9100a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=7789 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 3e0c5ad5-c063-4976-b431-6cd289928c0d default }" containerID=6bd2ea54642557c885420d1be587ed5656c4bd6ea70af2dda1e1a1f91a1123b4 datapathConfiguration="&{false false false false false }" interface=lxc243e5fac47e2 k8sPodName=kube-system/coredns-67659f764b-vdr4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bd2ea5464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bd2ea5464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6bd2ea5464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identity=7789 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bd2ea5464 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3674 identity=7789 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c9fc9100a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=643 identity=7789 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c9fc9100a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=643 identity=7789 ipv4=10.0.0.124 ipv6= k8sPodName=kube-system/coredns-67659f764b-f4xcf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6bd2ea5464 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3674 identity=7789 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bd2ea5464 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3674 identity=7789 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-vdr4x subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 d794e467-36cc-493f-b16f-00e176a264c7 default }" containerID=165341925c915450c85a80b139c654b1417d617965589a4ce8b7e94897b1208f datapathConfiguration="&{false false false false false }" interface=lxc62107df57a64 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=165341925c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=165341925c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=165341925c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=54351 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=165341925c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=54351 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=165341925c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=462 identity=54351 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx subsys=endpoint level=info msg="Successful endpoint creation" containerID=165341925c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=462 identity=54351 ipv4=10.0.0.19 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-c99vx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d6aab93062 endpointID=2515 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-g6zp8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=d6aab93062 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2515 identity=7789 ipv4=10.0.0.119 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-g6zp8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 179109b7-157e-4c02-9a85-c608a4bad56c default }" containerID=ccf8571a2960063da09bebe6c3e9cc7c208e8de128032e905ff68197bec57ccf datapathConfiguration="&{false false false false false }" interface=lxc870717c77ac8 k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccf8571a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccf8571a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccf8571a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=28284 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ccf8571a29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=28284 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccf8571a29 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=859 identity=28284 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccf8571a29 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=859 identity=28284 ipv4=10.0.0.157 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-lwrv6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.116 37b09898-bfeb-4cd8-88fb-4a7586edfb4d default }" containerID=9fe8ee9eb1b66b2874b3b208843b5357060a250828a4b05085b8917d718998ad datapathConfiguration="&{false false false false false }" interface=lxc4176200393ed k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9fe8ee9eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 8ec34b56-183b-4503-a5b2-3c69a5268192 default }" containerID=340df9e19508e3219cc4745198833113d4ea644b8505d72e3ed894edbb1d4b1d datapathConfiguration="&{false false false false false }" interface=lxc8eaf6f04bd6b k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=340df9e195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9fe8ee9eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=340df9e195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9fe8ee9eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=38780 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9fe8ee9eb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1252 identity=38780 ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=340df9e195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identity=52218 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=340df9e195 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2918 identity=52218 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9fe8ee9eb1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1252 identity=38780 ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9fe8ee9eb1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1252 identity=38780 ipv4=10.0.0.116 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-hv4kc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=340df9e195 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2918 identity=52218 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc subsys=endpoint level=info msg="Successful endpoint creation" containerID=340df9e195 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2918 identity=52218 ipv4=10.0.0.207 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-zghkc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.46 024a4bd0-c938-4d16-bbd1-3510384864a4 default }" containerID=25a7c3a1e10aef4e5bd6969dd0a086849b5921690db8ca524ef89133071a466a datapathConfiguration="&{false false false false false }" interface=lxce41ea85d1d7e k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25a7c3a1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25a7c3a1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25a7c3a1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=5668 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25a7c3a1e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=929 identity=5668 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25a7c3a1e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=929 identity=5668 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=endpoint level=info msg="Successful endpoint creation" containerID=25a7c3a1e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=929 identity=5668 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25a7c3a1e1 endpointID=929 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-n5ltr subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=693b6674-9180-418e-8112-d7cc01ec9ffc k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=25a7c3a1e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=929 identity=5668 ipv4=10.0.0.46 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n5ltr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 1557dd41-13f7-41be-acbb-774953b6a99a default }" containerID=164133364fc33ee62333bb0bf922a321c0c35ea02ae19343e68da9675d5aedc7 datapathConfiguration="&{false false false false false }" interface=lxc20839ac30c51 k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=164133364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=164133364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=164133364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identity=13107 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=164133364f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2890 identity=13107 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=164133364f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2890 identity=13107 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=164133364f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2890 identity=13107 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=164133364f endpointID=2890 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-2qjh5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e145f0c8-981c-44e7-8d56-96b09fface92 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=164133364f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2890 identity=13107 ipv4=10.0.0.97 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-2qjh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 bd90fef8-796d-4b1a-93a3-6d79c08e8f06 default }" containerID=d41e83576e68640e3a103af6c65154a5feba84077c9df25448a01d7d0f2b7257 datapathConfiguration="&{false false false false false }" interface=lxc8f83f54d7b1e k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=23360 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=23360 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d41e83576e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2751 identity=23360 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d41e83576e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2751 identity=23360 ipv4=10.0.0.41 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-v7xhv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.107 0dc0c6e5-e2df-4b81-9e52-6834d8d202aa default }" containerID=5a0c0115d6e44fe758438c8adbbc2bb07a1364af4c7b9ea7c7e52f0c833eaca9 datapathConfiguration="&{false false false false false }" interface=lxcc0046dd695d5 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5a0c0115d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5a0c0115d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5a0c0115d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=18670 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5a0c0115d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=77 identity=18670 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5a0c0115d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=77 identity=18670 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5a0c0115d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=77 identity=18670 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5a0c0115d6 endpointID=77 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-xssn5 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=31858cc9-fb73-4a72-9456-1c328f1f28eb k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=5a0c0115d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=77 identity=18670 ipv4=10.0.0.107 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xssn5 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=60ed846c-f44c-4b53-9044-cf6cd82ac475] Description:}]" policyAddRequest=7f35259a-0851-44c6-8b00-5f9356122c19 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7f35259a-0851-44c6-8b00-5f9356122c19 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e62517fd-f928-4b5e-8480-1dab57a78f67] Description:}]" policyAddRequest=bc79db3f-d91d-4a79-bbdf-77c20b8d3653 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=bc79db3f-d91d-4a79-bbdf-77c20b8d3653 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.45 a5f138db-e98b-4707-8686-8a197bbda856 default }" containerID=ed632109c0d9218b9ea4415f31661e8efb005bea8ed37cca69faa52c5cc6ea1a datapathConfiguration="&{false false false false false }" interface=lxc6990d05a71ee k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed632109c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed632109c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed632109c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=2216 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed632109c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2612 identity=2216 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed632109c0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2612 identity=2216 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed632109c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2612 identity=2216 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xjflz subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 55805e7d-e543-468a-b607-aa6bf3b399b2 default }" containerID=adb5e18bf79178bf3cb65b56814c08f419524afbe7917a2c8cf6e5d49c99260c datapathConfiguration="&{false false false false false }" interface=lxc30cf2869415d k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=adb5e18bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=adb5e18bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=adb5e18bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=63945 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=adb5e18bf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3218 identity=63945 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=adb5e18bf7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3218 identity=63945 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb subsys=endpoint level=info msg="Successful endpoint creation" containerID=adb5e18bf7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3218 identity=63945 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-gj5jb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 a8f3a687-5ab6-4cca-9de2-2390a93f7ae7 default }" containerID=555245df0a63b542755a47847281f18db746563e8f2be40d5279255ffe34739b datapathConfiguration="&{false false false false false }" interface=lxc7b0abd0c6f2e k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=24273 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1608 identity=24273 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=555245df0a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1608 identity=24273 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j subsys=endpoint level=info msg="Successful endpoint creation" containerID=555245df0a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1608 identity=24273 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-m5g4j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 7fce242a-72f2-4aaf-aa6c-a96f08f83478 default }" containerID=c7b5e3624e33b3258fcb27a28db51b286f79ad067256d2f4b83cc90eaa7b3a41 datapathConfiguration="&{false false false false false }" interface=lxc618284a16a94 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7b5e3624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7b5e3624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7b5e3624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=56028 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c7b5e3624e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=56028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7b5e3624e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2216 identity=56028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7b5e3624e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2216 identity=56028 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.4 5d508ef1-842d-4a9c-88b2-d42b2ed586cd default }" containerID=e48572f4f0c7ef15f5c12ffc46d329897bd0256decec91a0553a60dd95252108 datapathConfiguration="&{false false false false false }" interface=lxc6addfa9107e6 k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e48572f4f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e48572f4f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e48572f4f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e48572f4f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1298 identity=61203 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e48572f4f0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1298 identity=61203 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e48572f4f0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1298 identity=61203 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e48572f4f0 endpointID=1298 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e48572f4f0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1298 identity=61203 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fcd0e1a5-9662-4cf0-ba32-cf83822c0ef8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 e33c5062-0c2e-40e2-9493-bfa4e586f58b default }" containerID=9e9f4e3cde3ff38794f603bc59936f50d1e39c11ccef47152fc26e128149cc9a datapathConfiguration="&{false false false false false }" interface=lxc2dce8c827bc9 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e9f4e3cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e9f4e3cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e9f4e3cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=26089 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9e9f4e3cde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3119 identity=26089 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e9f4e3cde datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3119 identity=26089 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e9f4e3cde datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3119 identity=26089 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3c272461-ef44-40e5-bfb0-5bcec27e0e49] Description:}]" policyAddRequest=e2e6fc4d-1319-4149-aad9-6822ca184c41 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e2e6fc4d-1319-4149-aad9-6822ca184c41 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.20 7e01ef98-d754-4521-ab85-a9d1d504910f default }" containerID=5ee0fc83f3faa89c300f9dbe1b8273569e8297fa90f79fc46e3d61b5a8896153 datapathConfiguration="&{false false false false false }" interface=lxc5a4ab1c0db30 k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ee0fc83f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ee0fc83f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ee0fc83f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ee0fc83f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=921 identity=61203 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ee0fc83f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=921 identity=61203 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ee0fc83f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=921 identity=61203 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=daemon level=info msg="Delete endpoint request" containerID=5ee0fc83f3 endpointID=921 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ee0fc83f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=921 identity=61203 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3e6ef37c-2c1c-4d5a-9fbb-996a947a9b50 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 271c77d1-c9b5-4720-8fee-a76feeaa47d3 default }" containerID=9a220db24e9d1790dbe8da5bd2323214852c48eacffe08a600b96183e927fda6 datapathConfiguration="&{false false false false false }" interface=lxc64f0d52dd517 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=19708 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=364 identity=19708 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a220db24e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=364 identity=19708 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a220db24e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=364 identity=19708 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=5005838a-6e26-47c4-8dd5-9bc06b89eddb] Description:}]" policyAddRequest=5d094495-1e9a-413e-adef-449d09161229 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=5d094495-1e9a-413e-adef-449d09161229 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.108 af0335a1-78d6-4dc1-95d3-a4ceb9bf2143 default }" containerID=27e546c82f149449908d604ae198a906657a546c6e243213af1a75c16c3d2341 datapathConfiguration="&{false false false false false }" interface=lxc1f465501c4f5 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27e546c82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27e546c82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27e546c82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=38764 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27e546c82f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=38764 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27e546c82f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=38764 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27e546c82f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=38764 ipv4=10.0.0.108 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008467812842398583 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.62 1ad04ad7-6ec2-422b-97ee-26c4458582e4 default }" containerID=7489c98bcfbe800d04142affdb48560d9b0d3db3a82033b1cf683b82ce679d6c datapathConfiguration="&{false false false false false }" interface=lxc041db737a6fa k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=42394 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=42394 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7489c98bcf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2908 identity=42394 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7489c98bcf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2908 identity=42394 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-qd2k8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.148 bf6a926e-ee80-4589-91b3-2293b5fa3b50 default }" containerID=0e2bde0e7a1cac4e550a13d6caf612bb0b6f9fa14aca2d3a8e9ff5a1fa3d11db datapathConfiguration="&{false false false false false }" interface=lxccb1b39fa4913 k8sPodName=monitoring/node-feature-discovery-worker-g89vn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e2bde0e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e2bde0e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.151 d2c40ca1-7565-41a8-bf80-781b722a3bce default }" containerID=7ca611c60f7da4e1440f5a2de0cb7313555af22c62e247176c35cfeb354f3204 datapathConfiguration="&{false false false false false }" interface=lxc81466ce72543 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ca611c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ca611c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=0e2bde0e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=53557 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e2bde0e7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=53557 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ca611c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=25998 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ca611c60f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=25998 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e2bde0e7a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1101 identity=53557 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e2bde0e7a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1101 identity=53557 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-g89vn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ca611c60f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=25998 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ca611c60f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=25998 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cc5rf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.210 87e4b199-84d1-488e-875f-40eb83940554 default }" containerID=797de9bf2959178ce34e82e1406164699ed75fd4c0442f678bc533b5bbed1c76 datapathConfiguration="&{false false false false false }" interface=lxc6ba7db2ba8fc k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=797de9bf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=797de9bf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=797de9bf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=20632 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=797de9bf29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1149 identity=20632 ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=797de9bf29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1149 identity=20632 ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=797de9bf29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1149 identity=20632 ipv4=10.0.0.210 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-gdsjz subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00026 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00026 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00026 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00026:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=26 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 1f5b1eb7-0d93-4b5c-aea1-5664fa9fec3d default }" containerID=3fd400158cefca87d8b5387f7c7103401de94f4013903d2fc90aaeed0a86cd6a datapathConfiguration="&{false false false false false }" interface=lxc8dc51f803fb8 k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd400158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd400158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fd400158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=1664 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3fd400158c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=857 identity=1664 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fd400158c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=857 identity=1664 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd400158c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=857 identity=1664 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fd400158c endpointID=857 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lwv5m subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=f8e1e24e-e359-47df-ab73-de590d0e8141 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3fd400158c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=857 identity=1664 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lwv5m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.164 0d5822b4-b195-4d9d-8df2-77d89180064b default }" containerID=96116c876f88b6e30a884cce2996fe02696b1881be94cd945dcc86f5c4754068 datapathConfiguration="&{false false false false false }" interface=lxc1062bdd19845 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96116c876f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96116c876f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=96116c876f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=15126 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96116c876f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2792 identity=15126 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96116c876f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2792 identity=15126 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=96116c876f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2792 identity=15126 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-kbnhb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 38cc6b3a-a220-4256-8616-d8498a5f5ba0 default }" containerID=18fe7b56f99b8db71a70655f5542e78f4410e8632edfb2318408169df7648b40 datapathConfiguration="&{false false false false false }" interface=lxc01fc8e4ac663 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18fe7b56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18fe7b56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.98 cd6f92be-355e-47ed-ab01-d474421ec29a default }" containerID=d730e57a5b713a7eabb9b1172b1c0b2409be4377205acd9eb552620d7a11c839 datapathConfiguration="&{false false false false false }" interface=lxc84d3275270f3 k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d730e57a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d730e57a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18fe7b56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=9534 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18fe7b56f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=9534 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d730e57a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=19630 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d730e57a5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=619 identity=19630 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18fe7b56f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2784 identity=9534 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx subsys=endpoint level=info msg="Successful endpoint creation" containerID=18fe7b56f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=9534 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5tjvx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d730e57a5b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=619 identity=19630 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn subsys=endpoint level=info msg="Successful endpoint creation" containerID=d730e57a5b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=619 identity=19630 ipv4=10.0.0.98 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-58c58cff58-4k4gn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 6cca475d-5fb7-4b57-905a-1e7879338057 default }" containerID=34670da3996292d525effe923ad49f5801912797e3d9e142d02185e7ff8181c7 datapathConfiguration="&{false false false false false }" interface=lxc0389d9ee4828 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34670da399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34670da399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34670da399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=22630 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34670da399 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=22630 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34670da399 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=22630 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=endpoint level=info msg="Successful endpoint creation" containerID=34670da399 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=22630 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.195 aaa624cd-2aa8-4224-947d-310532687b30 default }" containerID=1985333f579b75c6345bc2e4e9b1684053f9e0393b721857c3e28460f041f0a5 datapathConfiguration="&{false false false false false }" interface=lxcdef675118cf2 k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1985333f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1985333f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1985333f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1985333f57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=61203 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1985333f57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3236 identity=61203 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1985333f57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=61203 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 e89f662e-db12-4a9d-9128-f5438efca591 default }" containerID=16022a41960e558230a61b6ae7bc9937efe6bd42837b94b1af743fe6a873dd89 datapathConfiguration="&{false false false false false }" interface=lxcb3f8ee3e5bec k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16022a4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16022a4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=16022a4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=16022a4196 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=61203 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16022a4196 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=852 identity=61203 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=endpoint level=info msg="Successful endpoint creation" containerID=16022a4196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=61203 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=daemon level=info msg="Delete endpoint request" containerID=34670da399 endpointID=1095 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-tgdvb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=50917a1b-035c-46c0-97d1-b4d860964d8d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=34670da399 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=22630 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-tgdvb subsys=endpoint level=info msg="Delete endpoint request" containerID=1985333f57 endpointID=3236 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=16022a4196 endpointID=852 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1985333f57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=61203 ipv4=10.0.0.195 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6fd1a361-4e4d-4aa9-b698-76a6366ff999 subsys=endpoint level=info msg="Removed endpoint" containerID=16022a4196 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=61203 ipv4=10.0.0.52 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1242d53e-9227-4b38-9084-e7acf48cd469 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 bbec8096-29cc-4864-b910-d7f5aa5940e3 default }" containerID=69338d04894e5b53911b9456b3ab860eacb1891b6ff7cb069954c5da84fea3f7 datapathConfiguration="&{false false false false false }" interface=lxce9e1fec485d5 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=56719 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2222 identity=56719 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69338d0489 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2222 identity=56719 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=69338d0489 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2222 identity=56719 ipv4=10.0.0.196 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 328a5640-2ed5-40d6-a868-dbf5e76b88b0 default }" containerID=2f8c6e52f6abb906ac44ddac409f7c86566ed46c744ca49b55222e7a9a695936 datapathConfiguration="&{false false false false false }" interface=lxc90a41d79a208 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f8c6e52f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f8c6e52f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f8c6e52f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=59983 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f8c6e52f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1497 identity=59983 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f8c6e52f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1497 identity=59983 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f8c6e52f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1497 identity=59983 ipv4=10.0.0.253 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.85 55bb9b2b-7d5a-4552-bc92-e0e26295bdca default }" containerID=df1f37b89c98db85a8cc424ea338fbfc8db934f98b279b3553035a20866d9e73 datapathConfiguration="&{false false false false false }" interface=lxcc907acfb738f k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df1f37b89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df1f37b89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df1f37b89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=10078 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=df1f37b89c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1428 identity=10078 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 eb78b703-7475-48c2-887d-1383d0e4dbfc default }" containerID=96aa68084e26aea3a6b2647aff0d100c0c689ec5e21d30cf0d5d0222c3815701 datapathConfiguration="&{false false false false false }" interface=lxca9cb536ae320 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.142 137a47f6-b659-4809-966d-feb9140ebe48 default }" containerID=ec2aa9cee229a1a1d603dc50c855f4d245a415006f7d182f3c03baf9efe395ae datapathConfiguration="&{false false false false false }" interface=lxcc4e82c4d0720 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96aa68084e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="New endpoint" containerID=ec2aa9cee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec2aa9cee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=96aa68084e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=ec2aa9cee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=45720 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec2aa9cee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=45720 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96aa68084e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=32606 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96aa68084e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=32606 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df1f37b89c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1428 identity=10078 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs subsys=endpoint level=info msg="Successful endpoint creation" containerID=df1f37b89c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1428 identity=10078 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-h5bjs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ec2aa9cee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2297 identity=45720 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec2aa9cee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2297 identity=45720 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96aa68084e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=158 identity=32606 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96aa68084e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=158 identity=32606 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.236 7a29359f-7169-4774-9626-2a874d005dbe default }" containerID=522913d49add2d318d15643cf3d4d78cdcd57d077383ce081369c1e75e7e017d datapathConfiguration="&{false false false false false }" interface=lxc7c2f1f278efc k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=522913d49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=522913d49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=522913d49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=522913d49a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1876 identity=61203 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=522913d49a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1876 identity=61203 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=endpoint level=info msg="Successful endpoint creation" containerID=522913d49a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=61203 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 59720dcb-a462-436d-be83-87c1d5fdc0cc default }" containerID=23ee2a5f31c12c698ca04fa314864efcedfc2a04aa7f5e5ef65155b2cbd941c2 datapathConfiguration="&{false false false false false }" interface=lxc4591e9ef45ba k8sPodName=monitoring/vector-hjqdx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23ee2a5f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23ee2a5f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23ee2a5f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=21305 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23ee2a5f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=325 identity=21305 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23ee2a5f31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=325 identity=21305 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx subsys=endpoint level=info msg="Successful endpoint creation" containerID=23ee2a5f31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=325 identity=21305 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/vector-hjqdx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=522913d49a endpointID=1876 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=522913d49a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1876 identity=61203 ipv4=10.0.0.236 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2ccfeeb1-18a8-4926-b9dd-4db8635b0f7e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 4ca6b321-2726-4785-b3d9-ed9458dc29a9 default }" containerID=0139daa834cbb709126a9ac9fd6321afa8f6146b78f26324c3096412b5c76d5c datapathConfiguration="&{false false false false false }" interface=lxc696964431070 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0139daa834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0139daa834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0139daa834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=10392 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0139daa834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=351 identity=10392 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0139daa834 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=351 identity=10392 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0139daa834 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=351 identity=10392 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 f94d3ca9-3443-405a-b1e0-9e34c7af6132 default }" containerID=206491eca0f40f3bdfa0a578582eef573003dd556d56032d11a31728801b74ba datapathConfiguration="&{false false false false false }" interface=lxc86d216a97c5d k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=206491eca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=206491eca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=206491eca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=11817 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=206491eca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=11817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=206491eca0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3308 identity=11817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=206491eca0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3308 identity=11817 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mchd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 bff064a0-567f-41ac-919d-e10ebbecce68 default }" containerID=f30f4e66843eb1228f416c4aff96d8ef262162725e17398e982685e02620bb8b datapathConfiguration="&{false false false false false }" interface=lxc011bda2f2fcf k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=20877 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=20877 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f30f4e6684 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=559 identity=20877 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f30f4e6684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=559 identity=20877 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-nn8b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 4c802ab7-2996-418b-be66-3fbf97013d8b default }" containerID=8c98c94fa4746b3cbcc178cf73a94bb3400362f17049cbee0e96160df17844c0 datapathConfiguration="&{false false false false false }" interface=lxc8066405e7bfc k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c98c94fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c98c94fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c98c94fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c98c94fa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=61203 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c98c94fa4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1104 identity=61203 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c98c94fa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=61203 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=daemon level=info msg="Delete endpoint request" containerID=8c98c94fa4 endpointID=1104 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8c98c94fa4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1104 identity=61203 ipv4=10.0.0.137 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-34e2ac8a-f7cc-432f-bea6-8c8d4e019f51 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 746c7137-7516-49a0-93db-f443c44e0702 default }" containerID=9af3258629880865ecb0b74d6d0b9c42757e2e59bde7a73bcb110e76de83640c datapathConfiguration="&{false false false false false }" interface=lxc6674fc586639 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9af3258629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9af3258629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9af3258629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=49402 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9af3258629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=337 identity=49402 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9af3258629 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=337 identity=49402 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9af3258629 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=337 identity=49402 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 75148243-2c9c-4d2e-ab42-69e74548c9fb default }" containerID=852b0e65376a5264c128350bfc3370627c1ff8a5591c50ced35e699656824b6d datapathConfiguration="&{false false false false false }" interface=lxc6be72e72df97 k8sPodName=openstack/keystone-api-7445dbc667-d79zr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=12820 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2904 identity=12820 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 acd585a2-0c98-4d08-b6d8-bee8c68ca338 default }" containerID=8af55d8a057d0283f74833157a94ec35e1ca37f354c2d23e8b1a6008d2174225 datapathConfiguration="&{false false false false false }" interface=lxc4ebec237a493 k8sPodName=openstack/keystone-credential-setup-kdbf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8af55d8a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8af55d8a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8af55d8a05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=52964 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8af55d8a05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2850 identity=52964 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=852b0e6537 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2904 identity=12820 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr subsys=endpoint level=info msg="Successful endpoint creation" containerID=852b0e6537 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2904 identity=12820 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/keystone-api-7445dbc667-d79zr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8af55d8a05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2850 identity=52964 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8af55d8a05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2850 identity=52964 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8af55d8a05 endpointID=2850 k8sNamespace=openstack k8sPodName=keystone-credential-setup-kdbf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=097dd6f9-6418-43bc-b800-bbb1f78d2f89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8af55d8a05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2850 identity=52964 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/keystone-credential-setup-kdbf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 a60338dc-fd18-4a56-9e8a-1705d7543bbe default }" containerID=903bc17eeb8dacc4fedc23bd5fd8d04c5d922e6c6494875a42f1d499c9d17f9e datapathConfiguration="&{false false false false false }" interface=lxc04b1c5fdd162 k8sPodName=openstack/keystone-db-init-xj4wc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=903bc17eeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=903bc17eeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=903bc17eeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identity=9080 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=903bc17eeb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3957 identity=9080 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=903bc17eeb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3957 identity=9080 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=endpoint level=info msg="Successful endpoint creation" containerID=903bc17eeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3957 identity=9080 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=daemon level=info msg="Delete endpoint request" containerID=903bc17eeb endpointID=3957 k8sNamespace=openstack k8sPodName=keystone-db-init-xj4wc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=3cabb6ed-8b4b-4506-9cfd-4516e0d55e56 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=903bc17eeb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3957 identity=9080 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/keystone-db-init-xj4wc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 ef2e3f02-0fb9-4f96-9d6b-32b8fc20f55a default }" containerID=cb24e0b1ec4cc7462f7933e55a9ace274c8e601d3f20f16af43477a534746e6c datapathConfiguration="&{false false false false false }" interface=lxc077150f62a84 k8sPodName=openstack/keystone-fernet-setup-6pkmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb24e0b1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb24e0b1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=416fc53a-8e42-4e78-998d-5814da47a854,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=416fc53a-8e42-4e78-998d-5814da47a854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=416fc53a-8e42-4e78-998d-5814da47a854;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=416fc53a-8e42-4e78-998d-5814da47a854;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=cb24e0b1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=2115 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=416fc53a-8e42-4e78-998d-5814da47a854,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=416fc53a-8e42-4e78-998d-5814da47a854,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb24e0b1ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=2115 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb24e0b1ec datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=720 identity=2115 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb24e0b1ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=2115 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cb24e0b1ec endpointID=720 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-6pkmz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=416fc53a-8e42-4e78-998d-5814da47a854 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=416fc53a-8e42-4e78-998d-5814da47a854 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cb24e0b1ec datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=2115 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/keystone-fernet-setup-6pkmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 3acfcd96-5110-41ba-b6c8-a70c924a7cbc default }" containerID=510e553684f1eda3aab092fef0462fe07696eefef4903cd4379f57d7a3cd64c1 datapathConfiguration="&{false false false false false }" interface=lxc60fb72fd3dcf k8sPodName=openstack/keystone-db-sync-95zcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=510e553684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=510e553684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=510e553684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=60014 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=510e553684 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2116 identity=60014 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=510e553684 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2116 identity=60014 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=510e553684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2116 identity=60014 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=510e553684 endpointID=2116 k8sNamespace=openstack k8sPodName=keystone-db-sync-95zcm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=fdc1aea2-ec59-4cb1-a891-84c84d5cf762 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=510e553684 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2116 identity=60014 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/keystone-db-sync-95zcm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 9c972f25-5e4a-47f3-8fc0-4e05f9ee3004 default }" containerID=381f878ea53a46e96e2ca7ce1ab5a38fe5c505ada86d1faca4a7f8b753a2b0fc datapathConfiguration="&{false false false false false }" interface=lxc9b55681c7dec k8sPodName=openstack/keystone-rabbit-init-pdgcv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=39694 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=486 identity=39694 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=381f878ea5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=486 identity=39694 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=endpoint level=info msg="Successful endpoint creation" containerID=381f878ea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=486 identity=39694 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=381f878ea5 endpointID=486 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-pdgcv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=671445c4-1257-4696-bb1e-6fcb7e91a469 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=381f878ea5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=486 identity=39694 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-rabbit-init-pdgcv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 c8b19ed9-a43f-40d0-beb1-b5bff8ea9027 default }" containerID=5f91b302cf09340bd339a1b2bf1baba38603acbb936a10892c0fa1be3df63522 datapathConfiguration="&{false false false false false }" interface=lxc7ac4b0711d61 k8sPodName=openstack/keystone-domain-manage-c7gn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=42341 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=889 identity=42341 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f91b302cf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=889 identity=42341 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f91b302cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=42341 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5f91b302cf endpointID=889 k8sNamespace=openstack k8sPodName=keystone-domain-manage-c7gn5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=bb7f1848-e1cb-4d5f-b34a-495a0a0a53da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5f91b302cf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=889 identity=42341 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/keystone-domain-manage-c7gn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 78015936-c6da-408c-a6b8-142adf4557d8 default }" containerID=9f3b772ded1b303085e2efb22a30087676e3d4c3fc559bf5f155f5e2a70043bc datapathConfiguration="&{false false false false false }" interface=lxc5c980ae5b254 k8sPodName=openstack/keystone-bootstrap-c8ntn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f3b772ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f3b772ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f3b772ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=4914 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9f3b772ded datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=399 identity=4914 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f3b772ded datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=399 identity=4914 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f3b772ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=399 identity=4914 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f3b772ded endpointID=399 k8sNamespace=openstack k8sPodName=keystone-bootstrap-c8ntn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=117d80d2-72b0-45d0-b508-43861fbf45cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f3b772ded datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=399 identity=4914 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/keystone-bootstrap-c8ntn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 d7ad35ab-ab63-4eec-ae20-d55fbd5096c4 default }" containerID=d210dbee4db2e0e14a20f95bd6425f2eee2fc554e431c5e4c3300b24f093e709 datapathConfiguration="&{false false false false false }" interface=lxc22a601b19bd2 k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d210dbee4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d210dbee4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d210dbee4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d210dbee4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=61203 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d210dbee4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=469 identity=61203 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=endpoint level=info msg="Successful endpoint creation" containerID=d210dbee4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=61203 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=daemon level=info msg="Delete endpoint request" containerID=d210dbee4d endpointID=469 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d210dbee4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=469 identity=61203 ipv4=10.0.0.250 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8937f7aa-a98b-437d-9f99-5e570f1830ea subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03441908910141085 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.184 4c7b1bd8-bebf-41a1-a448-accf1b5a09e9 default }" containerID=d0c288a244f86e383fc0b936da510b10fdf07c2f86fc8c24b3676221f6ef1853 datapathConfiguration="&{false false false false false }" interface=lxc64ec4ba3a4c5 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0c288a244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0c288a244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d0c288a244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=54934 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0c288a244 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=54934 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0c288a244 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=747 identity=54934 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0c288a244 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=747 identity=54934 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.48 af13dff2-5449-4fc2-88ef-1de4d06c2034 default }" containerID=bfa99d0ad5c66f6b198b37da84b0eb0ee1cc16ab16cac07f8dbc32c130bdd0c1 datapathConfiguration="&{false false false false false }" interface=lxc0169be8538cd k8sPodName=openstack/barbican-api-84ddb7477b-tllsj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfa99d0ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfa99d0ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfa99d0ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=61245 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfa99d0ad5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=61245 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.235 4546f89e-bd48-449d-b059-572870ea9431 default }" containerID=218d4629c23e8a563d51af6a70b45d8048884e973c81c7c60c6f23e3e1ccb5ba datapathConfiguration="&{false false false false false }" interface=lxc8afc97700989 k8sPodName=openstack/barbican-db-init-s85tz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=218d4629c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=218d4629c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=218d4629c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=42446 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=218d4629c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2067 identity=42446 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfa99d0ad5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=453 identity=61245 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfa99d0ad5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=61245 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/barbican-api-84ddb7477b-tllsj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=218d4629c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2067 identity=42446 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=endpoint level=info msg="Successful endpoint creation" containerID=218d4629c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2067 identity=42446 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=218d4629c2 endpointID=2067 k8sNamespace=openstack k8sPodName=barbican-db-init-s85tz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=26bdfba5-f735-4168-a8a0-3a5e51113217 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=218d4629c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2067 identity=42446 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-db-init-s85tz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 23458fbc-9d76-4980-9ed0-9f031fb9f901 default }" containerID=15bc761b885a1fd4f95b561c2c5d5d1e1937a0cc754726d3a1b7d3caa24cba15 datapathConfiguration="&{false false false false false }" interface=lxc30386d57f19c k8sPodName=openstack/barbican-db-sync-w972v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15bc761b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15bc761b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15bc761b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=44751 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=15bc761b88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1285 identity=44751 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15bc761b88 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1285 identity=44751 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=endpoint level=info msg="Successful endpoint creation" containerID=15bc761b88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1285 identity=44751 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15bc761b88 endpointID=1285 k8sNamespace=openstack k8sPodName=barbican-db-sync-w972v subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=6cc880f8-9767-4a7d-bf9f-88bf5adee8a0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=15bc761b88 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1285 identity=44751 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/barbican-db-sync-w972v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 e3120e50-dac4-4fd4-9115-5ea62e1e582b default }" containerID=03e89bd30d7cc96aa3f0f3457ee5a43bc5bf2ea9f74c250b9f115a85b3de1bb1 datapathConfiguration="&{false false false false false }" interface=lxc618be2eeb38b k8sPodName=openstack/barbican-rabbit-init-cpbsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03e89bd30d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03e89bd30d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03e89bd30d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identity=12691 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03e89bd30d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1088 identity=12691 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03e89bd30d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1088 identity=12691 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=03e89bd30d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1088 identity=12691 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=03e89bd30d endpointID=1088 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-cpbsl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3215e23d-db1a-4504-a4b1-dbf6aca71c7b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=03e89bd30d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1088 identity=12691 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-cpbsl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 9b3fe0d8-10e1-4b32-b421-2d03e49da07a default }" containerID=042f0e081a8832404f6e285e0c686b08fb1299b3f41909e33b05183b6f468db4 datapathConfiguration="&{false false false false false }" interface=lxcf350ef2fbb25 k8sPodName=openstack/barbican-ks-service-82j8m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=042f0e081a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=042f0e081a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=042f0e081a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=59016 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=042f0e081a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=59016 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=042f0e081a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=788 identity=59016 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=endpoint level=info msg="Successful endpoint creation" containerID=042f0e081a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=788 identity=59016 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=042f0e081a endpointID=788 k8sNamespace=openstack k8sPodName=barbican-ks-service-82j8m subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=9a08b07b-9266-43e5-a092-0fca85ed2f78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=042f0e081a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=788 identity=59016 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-ks-service-82j8m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 36b29ae6-8f91-4ed2-85b7-4645e4aedc23 default }" containerID=284e50ddce9604ce8851291f9c78d5fb07a4bc235883a42e2c198ca06e520cba datapathConfiguration="&{false false false false false }" interface=lxc0137c81f7930 k8sPodName=openstack/barbican-ks-endpoints-cwgzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=284e50ddce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=284e50ddce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=284e50ddce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=24079 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=284e50ddce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1370 identity=24079 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=284e50ddce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1370 identity=24079 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=284e50ddce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1370 identity=24079 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=284e50ddce endpointID=1370 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cwgzr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e18490a2-27fd-49ab-b09c-a955b751deff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=284e50ddce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1370 identity=24079 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cwgzr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 9104ab6c-a819-434a-b5be-80b1768c691a default }" containerID=36df102d743a6308a12c41aa901e00b34e3f099a3cf94ab65eb7695fca5101f4 datapathConfiguration="&{false false false false false }" interface=lxc806445fbbd2c k8sPodName=openstack/barbican-ks-user-m57hp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36df102d74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36df102d74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36df102d74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=6428 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36df102d74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=6428 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=36df102d74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=723 identity=6428 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=endpoint level=info msg="Successful endpoint creation" containerID=36df102d74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=723 identity=6428 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36df102d74 endpointID=723 k8sNamespace=openstack k8sPodName=barbican-ks-user-m57hp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=6929af17-8f20-42fe-85ff-e2d47f6bc88a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=36df102d74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=723 identity=6428 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/barbican-ks-user-m57hp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.74 9fe66f44-913a-48e6-b3e6-88db007403ba default }" containerID=7317eea7ca8fd33d4d882257fa83f230fff578e9424e0ca17b004402c9f27a05 datapathConfiguration="&{false false false false false }" interface=lxc861cf157344a k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7317eea7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7317eea7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7317eea7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=32695 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7317eea7ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1446 identity=32695 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7317eea7ca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1446 identity=32695 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls subsys=endpoint level=info msg="Successful endpoint creation" containerID=7317eea7ca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1446 identity=32695 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-zp7ls subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 b731beb7-3603-45d8-8383-45196d1fe179 default }" containerID=65c34c1a7ded9b5a087be08493d5b777b287bb7e178238f9f57162a1190a1e66 datapathConfiguration="&{false false false false false }" interface=lxc1171aea5a6e0 k8sPodName=openstack/rook-ceph-detect-version-pmdkb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65c34c1a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65c34c1a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=65c34c1a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=6385 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65c34c1a7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=403 identity=6385 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65c34c1a7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=403 identity=6385 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=endpoint level=info msg="Successful endpoint creation" containerID=65c34c1a7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=6385 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65c34c1a7d endpointID=403 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-pmdkb subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e77e0145-7ab9-458a-a3ce-949da81e0739 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=65c34c1a7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=403 identity=6385 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pmdkb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 7e4bce27-d7b1-4d7b-9e30-0fdbf386fd57 default }" containerID=fce9c749a1f50e1f10ed075cc3da2eb3c62d954bf3c21856e47c03ac36651acd datapathConfiguration="&{false false false false false }" interface=lxc7d3dd317094f k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fce9c749a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fce9c749a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fce9c749a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identity=28181 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fce9c749a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2705 identity=28181 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fce9c749a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2705 identity=28181 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=fce9c749a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2705 identity=28181 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fce9c749a1 endpointID=2705 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-wz8cc subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=51ce2ae7-8c13-41ef-afff-78b82416aa46 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=fce9c749a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2705 identity=28181 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-wz8cc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 7c5c7693-e219-4295-ac65-2bed2291c30a default }" containerID=b488f8c375574f92c31c9d600f5f5a0d241c17b27f0ad578685f7ed29277c168 datapathConfiguration="&{false false false false false }" interface=lxc8aa783f36791 k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b488f8c375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b488f8c375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b488f8c375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identity=61203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b488f8c375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2258 identity=61203 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b488f8c375 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2258 identity=61203 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=endpoint level=info msg="Successful endpoint creation" containerID=b488f8c375 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2258 identity=61203 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=daemon level=info msg="Delete endpoint request" containerID=b488f8c375 endpointID=2258 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b488f8c375 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2258 identity=61203 ipv4=10.0.0.202 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f3bc810-741c-4a3e-bf79-ade8b17604fe subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 53aaccdf-fdca-4803-94f2-a50452499210 default }" containerID=18d390ad6e472bd59e8a485ebacab1961df7fdc4d12605540e0227a2843b0d99 datapathConfiguration="&{false false false false false }" interface=lxcc52c8133e5bc k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=12763 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2610 identity=12763 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18d390ad6e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2610 identity=12763 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18d390ad6e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2610 identity=12763 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 370e870b-e809-40e5-addb-125080bd3cec default }" containerID=1fdbaf628433f3a1545492ea912c089ba77c59aed9e76aeb3dc6576f73f76c6e datapathConfiguration="&{false false false false false }" interface=lxc3d130b872ab3 k8sPodName=openstack/glance-db-init-8jlx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1fdbaf6284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1fdbaf6284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1fdbaf6284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=38984 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1fdbaf6284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=266 identity=38984 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1fdbaf6284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=266 identity=38984 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1fdbaf6284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=38984 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1fdbaf6284 endpointID=266 k8sNamespace=openstack k8sPodName=glance-db-init-8jlx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=5c72d8b5-172c-443b-9be2-cb09057753cd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1fdbaf6284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=266 identity=38984 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-db-init-8jlx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 982f4ea7-9872-4501-934a-497ba63810c0 default }" containerID=58c6fcaca3b42f4a42f30c97851b285f43d5bb476f328af7e52a07e29aa497c4 datapathConfiguration="&{false false false false false }" interface=lxc53ef02881bb1 k8sPodName=openstack/glance-db-sync-7cbc6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58c6fcaca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58c6fcaca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9de7461-5640-4230-a839-641c7ac10064,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f9de7461-5640-4230-a839-641c7ac10064,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f9de7461-5640-4230-a839-641c7ac10064;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=f9de7461-5640-4230-a839-641c7ac10064;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58c6fcaca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=48747 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f9de7461-5640-4230-a839-641c7ac10064,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=f9de7461-5640-4230-a839-641c7ac10064,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=58c6fcaca3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2782 identity=48747 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58c6fcaca3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2782 identity=48747 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58c6fcaca3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2782 identity=48747 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 0826f4d1-4dd6-48b9-9dc4-0d313cf54e4f default }" containerID=e5ed3f076a837e018442c6edc4512144d2bd6c97ad6d51a2a3590ae9e2383d36 datapathConfiguration="&{false false false false false }" interface=lxc1840e416adb4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5ed3f076a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5ed3f076a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5ed3f076a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=56653 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e5ed3f076a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2184 identity=56653 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 f2cd3674-1f6a-40e8-afe8-0a36e33e33ba default }" containerID=81e723cb1f9ee0189cefbe443d5f569846feb439b7a1d4812ac1fff9a086e616 datapathConfiguration="&{false false false false false }" interface=lxc1a8b495d3e4f k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81e723cb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81e723cb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81e723cb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=43978 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81e723cb1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=43978 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5ed3f076a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2184 identity=56653 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5ed3f076a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2184 identity=56653 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d6lhz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81e723cb1f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=760 identity=43978 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg subsys=endpoint level=info msg="Successful endpoint creation" containerID=81e723cb1f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=760 identity=43978 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-5wqhg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58c6fcaca3 endpointID=2782 k8sNamespace=openstack k8sPodName=glance-db-sync-7cbc6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f9de7461-5640-4230-a839-641c7ac10064 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=f9de7461-5640-4230-a839-641c7ac10064 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=58c6fcaca3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2782 identity=48747 ipv4=10.0.0.123 ipv6= k8sPodName=openstack/glance-db-sync-7cbc6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 657df5cd-b01f-495d-bea8-2d04aa34a29c default }" containerID=601747529aa36e273ad0ad257b0e1e496f8a4aaa732c9b5549472c3074a93b3e datapathConfiguration="&{false false false false false }" interface=lxc151d7f35e6e4 k8sPodName=openstack/glance-rabbit-init-5k75x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=601747529a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=601747529a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=601747529a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=18464 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=601747529a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=298 identity=18464 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=601747529a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=298 identity=18464 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=endpoint level=info msg="Successful endpoint creation" containerID=601747529a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=18464 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=601747529a endpointID=298 k8sNamespace=openstack k8sPodName=glance-rabbit-init-5k75x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=6cc0d4ed-e7c2-453e-99e5-aa874e58623e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=601747529a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=298 identity=18464 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/glance-rabbit-init-5k75x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 44d0b748-325b-473b-bce2-9e8e0aac9c13 default }" containerID=22206324e26789cb1768f3204505061f16485a3468c5ddaed87d6b9ac757685b datapathConfiguration="&{false false false false false }" interface=lxc73b820a8daad k8sPodName=openstack/glance-ks-service-fh4v4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=22206324e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=22206324e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=22206324e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=47445 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=22206324e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=47445 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=22206324e2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=108 identity=47445 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=22206324e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=47445 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=22206324e2 endpointID=108 k8sNamespace=openstack k8sPodName=glance-ks-service-fh4v4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=b29c4eed-7718-437e-9aa9-bacc2efcb663 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=22206324e2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=108 identity=47445 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-ks-service-fh4v4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 50e05b8d-fb3b-403d-ab60-65fc59522f1b default }" containerID=bbc550a9b8a82a1b1ee028d2156ecf63b1c3cb48c22c8082c63e9542e317db59 datapathConfiguration="&{false false false false false }" interface=lxc79f9f2f1f2be k8sPodName=openstack/glance-ks-endpoints-9gwj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbc550a9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbc550a9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbc550a9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=3217 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbc550a9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=871 identity=3217 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbc550a9b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=871 identity=3217 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbc550a9b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=871 identity=3217 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbc550a9b8 endpointID=871 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-9gwj7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6fe107ca-59f6-4cb8-8946-4d28d0d9b3fb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bbc550a9b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=871 identity=3217 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/glance-ks-endpoints-9gwj7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 72a28946-d66b-43e9-b60c-3238b1211537 default }" containerID=e5d309cb71c95cda873502c06d352d9f9df8de4a49f6912db3cdf9c3bb9b3649 datapathConfiguration="&{false false false false false }" interface=lxcd376a54f9d82 k8sPodName=openstack/glance-ks-user-7fhlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=14935 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=288 identity=14935 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e5d309cb71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=288 identity=14935 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5d309cb71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=14935 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5d309cb71 endpointID=288 k8sNamespace=openstack k8sPodName=glance-ks-user-7fhlb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=92004b39-3d88-4e50-b0ac-166c3a9127cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e5d309cb71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=288 identity=14935 ipv4=10.0.0.254 ipv6= k8sPodName=openstack/glance-ks-user-7fhlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 3f1d6905-a7dc-4331-9387-37e07784b672 default }" containerID=991cbf879b6ea268cab88ae1f953070e406bd033310bbed63f149e2a41f6fd1f datapathConfiguration="&{false false false false false }" interface=lxc309ffd1ebb65 k8sPodName=openstack/glance-metadefs-load-jt6fj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=991cbf879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=991cbf879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=991cbf879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=43785 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=991cbf879b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=43785 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=991cbf879b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=169 identity=43785 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=endpoint level=info msg="Successful endpoint creation" containerID=991cbf879b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=43785 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=991cbf879b endpointID=169 k8sNamespace=openstack k8sPodName=glance-metadefs-load-jt6fj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=661ce38b-6076-4546-aa97-65c9fd503d30 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=991cbf879b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=169 identity=43785 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/glance-metadefs-load-jt6fj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 7b31142e-9300-44ad-8d72-248bab5ddc11 default }" containerID=166b63ef0368dbdc17cb911b4cf02263c8e8aaed780e0f08474f6345922ee680 datapathConfiguration="&{false false false false false }" interface=lxc01c8f33fb55f k8sPodName=openstack/glance-storage-init-44hrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=166b63ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1815 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=166b63ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1815 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a8e757ea-1647-414c-a860-16723c8a4755,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a8e757ea-1647-414c-a860-16723c8a4755,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a8e757ea-1647-414c-a860-16723c8a4755;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a8e757ea-1647-414c-a860-16723c8a4755;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=166b63ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1815 identity=2620 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a8e757ea-1647-414c-a860-16723c8a4755,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a8e757ea-1647-414c-a860-16723c8a4755,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=166b63ef03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1815 identity=2620 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=166b63ef03 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1815 identity=2620 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=166b63ef03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1815 identity=2620 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=166b63ef03 endpointID=1815 k8sNamespace=openstack k8sPodName=glance-storage-init-44hrt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a8e757ea-1647-414c-a860-16723c8a4755 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a8e757ea-1647-414c-a860-16723c8a4755 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=166b63ef03 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1815 identity=2620 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-storage-init-44hrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 db34e954-72b5-43ed-a807-3f51dbc7bab5 default }" containerID=2a46c4a037c7f34c1ec3010e7048063ca3c16d9c47010de3c5d543b92c522108 datapathConfiguration="&{false false false false false }" interface=lxc708c4243955d k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2a46c4a037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2a46c4a037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2a46c4a037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1768 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2a46c4a037 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=524 identity=1768 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2a46c4a037 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=524 identity=1768 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2a46c4a037 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=524 identity=1768 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-api-6c5b5cf945-h9gnp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.23 79f6e4cf-ec40-4b1e-ba67-542986dd9500 default }" containerID=4aaa12bd688e776b9dd76a6bc52051c101dc49e9f81461f0dafa60dc2d8c4a63 datapathConfiguration="&{false false false false false }" interface=lxcb8a051ccfb38 k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4aaa12bd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4aaa12bd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4aaa12bd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=4977 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4aaa12bd68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3448 identity=4977 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 df70a3f9-2ff1-426c-a479-dc263344859a default }" containerID=6617df7a1dfdfa3125d04f02950863ad7fd44c08120b85f04261aba39a5c0347 datapathConfiguration="&{false false false false false }" interface=lxcb4ae8dea389a k8sPodName=openstack/staffeln-db-init-gkzkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6617df7a1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3147 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6617df7a1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3147 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.107 0296c1e3-f96f-4828-948c-1ed7bcb2544f default }" containerID=4b7b5533134e1b173af94b62d295e7fc9ef03eb1113415be0f892234c5d53467 datapathConfiguration="&{false false false false false }" interface=lxc101f18674f4b k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b7b553313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b7b553313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6617df7a1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3147 identity=22461 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6617df7a1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3147 identity=22461 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=4aaa12bd68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3448 identity=4977 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4aaa12bd68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3448 identity=4977 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/staffeln-conductor-6b8d8f6794-nvht9 subsys=daemon level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b7b553313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=2735 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b7b553313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=652 identity=2735 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6617df7a1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3147 identity=22461 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6617df7a1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3147 identity=22461 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4b7b553313 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=652 identity=2735 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b7b553313 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=652 identity=2735 ipv4=10.0.0.107 ipv6= k8sPodName=openstack/staffeln-api-6dcd445c85-frg98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6617df7a1d endpointID=3147 k8sNamespace=openstack k8sPodName=staffeln-db-init-gkzkk subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=968151aa-ea93-44cf-9856-ec20877e26cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=6617df7a1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3147 identity=22461 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-init-gkzkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 3af33091-0eb5-4ba3-9811-9e974110f43c default }" containerID=6a60e05b4294b816dd318851b2d18e0efb06b634b2bb3f347accbf2a15f01bce datapathConfiguration="&{false false false false false }" interface=lxccce644d321d0 k8sPodName=openstack/staffeln-db-sync-z8tvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a60e05b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a60e05b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a60e05b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=29850 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=374c028b-8762-40e7-bddd-9d5bd9361441,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a60e05b42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=29850 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a60e05b42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2506 identity=29850 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a60e05b42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2506 identity=29850 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/staffeln-db-sync-z8tvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager